Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348031ac-378e-3418-8fc8-2b78acf56996.roa
File: 348031ac-378e-3418-8fc8-2b78acf56996.roa (raw, json)
Hash identifier: DA1sYvqMm9awkXoImaDntES0U+m6X3ozv4+XrAf4H/Q=
Subject key identifier: 93:01:6A:A4:D9:FD:35:DB:4C:E3:49:98:87:A8:6B:B7:DA:E6:3F:29
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A860EA5894A3E56C28B500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348031ac-378e-3418-8fc8-2b78acf56996.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:60:ea:58:94:a3:e5:6c:28:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=03a9cfa4-3e40-4590-8445-d213aab1a9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:d8:f7:5f:08:d7:2d:11:ce:e4:c0:8b:6b:
82:8d:d8:22:b6:82:37:19:18:41:51:dd:ca:a5:d4:
34:66:41:f3:3d:4a:f4:7d:4e:e6:ed:50:b2:ae:5b:
ba:04:d3:6d:82:72:7b:dc:b3:94:e4:0e:5e:a2:a9:
1f:6c:a0:50:2c:64:60:cf:79:8c:ec:7f:e0:4e:9c:
28:41:81:8b:ab:7b:96:a0:c3:14:03:3a:57:b7:23:
57:10:ad:21:ec:21:dc:00:5e:1d:56:fc:9c:0b:5d:
69:91:7c:67:bd:93:51:3b:20:65:98:c2:60:8b:7b:
6c:82:95:00:d7:b5:4f:33:8d:be:f8:24:01:c1:de:
2a:aa:57:4e:54:33:fb:52:fa:79:b2:cc:22:eb:2a:
93:6a:02:e2:f5:a2:02:6e:40:b8:8f:90:af:ce:be:
3b:43:0f:1d:6c:30:85:8a:3e:50:7c:b9:ab:64:fa:
20:72:aa:1d:46:22:44:7c:49:93:96:b1:2f:93:d2:
c3:75:af:fe:0b:13:2d:73:b2:24:00:34:fa:ce:d3:
82:26:40:7a:2a:05:3b:a0:10:f0:cf:9a:a5:19:f9:
37:e0:a6:9e:6e:05:5c:4a:ba:8b:4d:bf:cf:97:21:
ba:b2:e5:c4:c2:0d:8c:f4:1c:cf:74:12:b5:ab:08:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:6A:A4:D9:FD:35:DB:4C:E3:49:98:87:A8:6B:B7:DA:E6:3F:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348031ac-378e-3418-8fc8-2b78acf56996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c5:43:61:24:5d:68:22:58:c3:f7:da:b3:72:2b:e7:f2:f9:
1b:f4:f7:a1:87:da:0c:9f:79:d2:06:af:36:a1:f1:e4:37:55:
95:b2:6c:cb:56:e0:6d:33:9d:3a:38:f3:c6:62:0f:38:42:e4:
94:f0:15:44:6b:76:d6:13:6d:84:89:4e:c4:09:97:8e:93:b8:
ab:b2:91:e5:32:82:86:c6:44:49:c6:08:83:37:69:4c:67:19:
99:0d:93:22:ce:42:ab:84:9c:f9:05:4a:e5:9c:33:5c:02:0a:
08:09:17:78:00:4a:68:13:f2:9c:0a:01:e5:c3:69:8d:eb:9a:
57:da:3e:a5:3f:95:fe:d4:44:8b:89:26:b3:85:1b:70:08:36:
ef:c5:9e:6f:c2:82:23:6f:7b:b8:cf:79:89:02:74:26:3f:06:
88:2a:69:0c:68:fe:44:52:27:98:ae:72:b1:de:3a:a9:1f:77:
e5:59:15:90:b9:f2:97:8c:d4:ae:4a:d0:77:19:a4:d8:a4:57:
9f:39:b3:b9:66:16:74:bc:3f:a2:8c:26:2a:30:61:7d:66:a6:
31:53:d1:ea:3d:64:be:60:dd:59:a8:dd:df:71:e0:f9:08:3f:
d0:0b:e3:a3:e8:a6:5f:4a:8a:2f:20:4c:1a:38:2b:c1:87:6a:
8a:ec:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org