Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/32bf870e-d080-3839-b60d-707437ca837d.roa
File: 32bf870e-d080-3839-b60d-707437ca837d.roa (raw, json)
Hash identifier: a6MBR9CVTYOdtjrDTcyKM/sneaYT70r8Haa96D1muiE=
Subject key identifier: 9A:72:69:96:06:03:C4:BC:48:48:53:5D:FA:37:75:06:60:3C:49:20
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583C2A5F766C2152DC4128BF1840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/32bf870e-d080-3839-b60d-707437ca837d.roa
Signing time: Mon 06 Dec 2021 05:00:00 +0000
ROA not before: Mon 06 Dec 2021 05:00:00 +0000
ROA not after: Sat 09 Mar 2024 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:2a:5f:76:6c:21:52:dc:41:28:bf:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 6 05:00:00 2021 GMT
Not After : Mar 9 05:00:00 2024 GMT
Subject: CN=437cc776-1d5b-4cc3-b8bf-df087b95a886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:46:e7:a4:e9:4f:0e:d7:d3:26:c1:f7:52:
2d:2a:c5:0a:9e:1c:46:75:89:74:95:8b:60:26:f5:
d6:60:72:60:1f:0b:4d:50:b9:da:71:5f:2e:2f:7a:
bf:94:fd:0c:95:e9:62:7b:aa:c1:07:97:e1:61:b6:
a9:10:31:95:82:56:3b:e5:0a:1b:7e:d0:bc:c4:cc:
4d:2b:56:69:38:66:ab:76:1c:9a:c6:e9:90:1a:6c:
b1:c1:f3:41:c6:6a:2f:c8:fe:e6:56:eb:ba:f8:88:
47:45:31:ae:31:af:1f:eb:fe:27:6b:17:e1:0b:56:
d3:69:eb:c1:eb:f9:7e:0c:fe:0f:49:92:c8:14:02:
a6:1d:b2:e2:d9:06:f0:8b:31:db:1a:a7:27:21:90:
a4:45:95:ef:c6:70:1f:64:57:8a:21:82:de:32:5c:
8e:a9:54:e2:c1:7c:af:19:e0:84:4d:4a:3b:b2:b8:
87:45:d7:59:97:58:a2:45:94:de:0c:b2:de:ad:b5:
86:0f:51:f6:f8:e8:bd:34:d5:c4:b4:ef:61:7b:4a:
37:b0:39:1d:42:07:87:57:ff:26:93:0d:f7:99:b1:
18:58:97:3b:f4:a8:1a:e3:db:52:d7:70:6e:60:92:
68:3d:ca:70:5e:54:2e:bb:85:6a:b7:0d:e6:16:ad:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:72:69:96:06:03:C4:BC:48:48:53:5D:FA:37:75:06:60:3C:49:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/32bf870e-d080-3839-b60d-707437ca837d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:fb:41:9b:c7:b0:14:3d:50:bc:a4:53:ac:38:3e:d9:cf:b4:
28:41:d4:59:d0:d1:61:ab:34:62:11:51:6e:6b:47:fc:93:06:
6c:b5:26:df:93:05:88:86:28:18:dd:43:52:1a:58:f7:8c:9d:
1a:48:3a:2e:f9:48:83:9a:71:89:d8:fe:f4:d5:1f:0c:8d:48:
ef:8a:ad:67:e1:85:40:a3:26:fa:cc:1c:1c:9a:c7:6f:29:9e:
12:3c:6e:55:5a:5d:57:e8:fe:8d:89:f8:b3:b2:bf:81:0e:62:
4d:4f:ab:07:7c:be:28:ad:0d:74:96:6c:5b:8e:4d:6e:ff:ed:
14:26:c3:3d:fd:a1:88:bc:ac:38:52:58:e9:76:0f:00:ef:6b:
7d:57:0c:4c:de:5a:07:7c:a8:90:a0:87:bd:b0:50:a8:a2:3b:
e7:4e:6c:c9:f0:4b:1e:91:d9:8f:fd:99:90:25:bf:88:4e:bf:
9b:fa:ae:fe:b7:56:57:f3:3d:c4:a6:41:bb:ce:4a:e1:ad:6f:
1a:03:65:ce:1e:fe:ac:23:f3:18:57:8c:50:50:30:ca:a7:20:
33:d1:47:da:51:57:37:01:d3:df:3f:f8:1a:1c:26:98:79:6e:
ee:2d:eb:59:5d:e5:e9:48:60:5e:b4:85:2c:98:b0:94:f1:d0:
fc:92:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:30 2024 by rpki-client on console-fra.rpki-client.org