Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33817588-6c28-330a-96cf-a27b1a5b1f4c.roa
File: 33817588-6c28-330a-96cf-a27b1a5b1f4c.roa (raw, json)
Hash identifier: QuJ8P1K2LG9MQ4x9VUzt4rnNs+WtW5aipD5s2fE0sK4=
Subject key identifier: E4:5B:B4:50:0A:48:A4:2A:BF:97:66:8B:28:FA:E8:C5:97:19:76:ED
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A33C3AEE526701EA7A8800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33817588-6c28-330a-96cf-a27b1a5b1f4c.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:3c:3a:ee:52:67:01:ea:7a:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=51a3f8de-e933-40bd-9d16-bb1d29ee32a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:06:65:27:0b:94:39:cf:72:b2:60:fb:f9:30:
98:e4:8c:05:45:04:8b:93:06:b8:55:62:b3:75:33:
1e:93:3e:b2:40:ce:df:d7:47:03:ec:e0:1d:d6:f2:
fc:b2:b6:b2:ee:b2:74:e2:59:56:1e:01:79:6e:08:
c4:ac:51:a0:a2:00:b9:ad:8d:27:1b:6c:c8:d4:d7:
86:27:ca:0d:31:11:db:a2:78:cc:94:47:5b:14:33:
6d:a1:78:6a:84:a7:70:55:32:02:1d:6e:fb:23:b0:
21:65:64:fc:d7:27:95:44:11:15:26:76:8b:43:d9:
38:a9:37:ac:c3:9a:03:7e:93:ae:27:64:ed:2e:d4:
e1:72:55:95:ca:0d:0f:77:c0:02:5c:2f:fe:c3:20:
d3:5a:e0:a1:e7:36:91:11:5e:1d:2d:3a:54:34:cf:
13:b3:70:7c:8f:04:98:da:99:1c:28:ce:e3:20:41:
56:02:0a:09:8d:2c:87:25:d4:36:d0:82:54:7e:95:
88:14:a8:1f:2f:48:bb:cc:76:98:82:2b:a8:85:45:
ca:37:33:c0:78:fb:6e:e1:99:39:11:02:d9:2b:2a:
be:88:af:9d:7c:a9:09:d6:77:69:9c:49:f3:85:ab:
8b:94:63:00:0e:85:11:fa:0d:d4:7b:b1:b3:73:94:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:B4:50:0A:48:A4:2A:BF:97:66:8B:28:FA:E8:C5:97:19:76:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33817588-6c28-330a-96cf-a27b1a5b1f4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:a2:9a:25:e9:0e:af:2d:f0:f9:84:ea:5d:ce:f6:0e:89:aa:
e4:8c:3c:71:6d:48:78:14:1b:b8:7d:41:9a:9e:fc:a8:e5:09:
57:fc:9b:c6:7a:46:3e:98:61:ab:20:5c:47:22:58:69:c4:6c:
a0:0a:7e:59:17:19:f0:95:03:60:bf:4d:7b:44:cf:b0:b1:8f:
27:54:c6:c7:f9:d2:47:2b:8f:cd:30:41:8b:41:6d:2f:fb:0d:
04:6f:36:85:17:ab:ac:b9:05:6f:37:61:c7:8f:13:79:48:29:
04:ce:a8:51:10:ee:b5:c3:55:02:f8:55:fd:c2:c1:cc:9a:be:
1d:b0:d5:4d:60:7c:19:1a:92:60:83:bb:09:9b:ff:21:51:0d:
37:d7:29:a1:4f:02:b9:42:91:bb:8c:79:1c:5c:3a:71:fe:a9:
ea:e4:78:c0:7b:e2:ef:1c:ee:ce:2a:a9:e3:2d:94:a4:e9:cd:
af:0c:db:bb:a8:3f:0e:08:85:d7:1f:74:01:ca:29:6a:7c:74:
a1:ee:9a:2a:84:68:25:77:e1:82:1e:bd:20:f2:51:f6:cb:f2:
8b:f9:98:f0:11:f0:0e:19:81:41:01:cf:0b:48:04:30:2a:db:
f7:0a:3e:d4:3c:5a:27:5e:7e:36:c7:e6:ce:8c:66:a2:82:4e:
d4:e0:d4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org