Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/379cc029-66af-37aa-8930-89bda0898956.roa
File: 379cc029-66af-37aa-8930-89bda0898956.roa (raw, json)
Hash identifier: PZ2uuBGGwy9MPVo9XLd+c9vfX6ntYX7d9ZeZRhSJ1Kg=
Subject key identifier: 0D:A4:B9:8D:15:D4:02:62:62:94:0A:4D:15:A7:00:20:AA:AE:CF:BA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B1A41FF8F2AA797EFCE480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/379cc029-66af-37aa-8930-89bda0898956.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b1:a4:1f:f8:f2:aa:79:7e:fc:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e0c3a900-7e53-47dc-8a50-db6fb24c4c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:d9:5e:2d:23:19:f7:6c:e4:7b:c7:21:2e:
c8:e8:00:f8:e3:1c:1f:57:6a:94:87:c3:63:fb:b9:
61:32:11:4b:20:97:25:0f:9c:af:ef:c6:77:3a:ba:
b9:20:eb:49:90:f7:83:33:f7:72:f2:ab:b7:25:d9:
3b:16:53:de:ca:a7:c7:62:f1:be:1c:9f:cc:eb:ac:
39:7a:90:c7:52:ec:14:55:a5:04:88:85:68:e5:74:
2f:35:af:d8:e0:17:df:dd:1f:ab:a0:64:42:fb:a3:
97:56:61:62:cc:51:ad:97:fa:bf:9f:86:91:9b:f5:
0f:f6:dc:61:7b:c6:20:4c:9f:7c:86:ac:2c:4b:9c:
fc:df:4d:af:06:7d:fd:45:e3:2a:47:d3:e4:39:7e:
d7:6a:59:71:f5:b5:a6:54:42:c8:7c:2f:1b:f8:89:
6e:c9:4f:34:ba:2b:94:c6:09:0d:3b:74:50:84:54:
09:f6:53:b3:7d:e0:ac:cc:59:83:9e:c8:10:72:fe:
81:ed:f5:e6:71:22:1c:88:5f:16:80:75:28:51:0e:
10:5f:ba:96:13:e9:18:36:4f:79:4e:7b:20:40:9c:
16:c7:4d:24:aa:df:54:05:5a:34:75:c4:77:d3:c4:
ec:f7:ac:94:8f:bc:63:0a:5b:2c:64:8f:0b:cb:47:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A4:B9:8D:15:D4:02:62:62:94:0A:4D:15:A7:00:20:AA:AE:CF:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/379cc029-66af-37aa-8930-89bda0898956.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e6:92:d0:e6:db:dd:9b:d0:5b:27:b4:d3:eb:f3:ca:47:66:
18:17:a0:27:9e:68:2c:8f:fa:be:3b:7b:9c:4d:57:9a:9c:56:
52:53:be:59:a1:84:62:c9:b4:8f:d9:74:d6:8c:3e:ce:a0:86:
d2:38:b0:66:f3:c0:cf:dc:44:38:9e:12:36:99:42:ff:54:40:
c1:44:5a:fb:a7:43:5a:88:7e:19:f1:c6:3b:c5:60:e7:55:55:
aa:56:cb:35:1e:af:8a:97:ee:b8:35:8a:e3:54:8a:f7:44:4c:
92:1e:24:46:d5:12:b5:8e:dc:ba:1f:d5:39:3b:3d:2f:94:53:
c3:5c:3f:bc:91:c0:50:bd:82:4d:41:b1:55:1e:5d:e8:0e:d1:
67:30:28:a9:bd:1b:1e:cc:b1:bb:60:1a:6c:f9:1c:e8:29:d0:
3b:ae:91:9a:fd:04:79:fd:65:b3:f6:cf:a4:46:5f:d9:fa:a8:
33:ed:b6:35:60:a6:ef:d2:c2:59:6f:35:a0:34:71:04:0d:a4:
d7:8b:76:86:ff:c4:95:95:ef:94:56:2c:52:63:62:25:c4:38:
88:02:17:d2:92:19:16:24:72:ea:b5:9b:c8:cc:82:8e:cb:25:
b3:ad:62:93:fa:ad:d6:dc:30:cc:f2:5b:e0:c3:0f:d8:d6:7b:
bc:2c:0d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org