Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3be00fda-d0c9-3132-8fce-6ccd907adaad.roa
File: 3be00fda-d0c9-3132-8fce-6ccd907adaad.roa (raw, json)
Hash identifier: RuCE45VY9YBRO4aoMxdqG3O33SQMllQiDPiDtDDU2BI=
Subject key identifier: CF:44:1A:1C:1C:1A:B1:C4:FA:A8:77:B6:53:39:F6:8F:FA:31:2D:8B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7AFE9172D3063DF2E51F320
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3be00fda-d0c9-3132-8fce-6ccd907adaad.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:af:e9:17:2d:30:63:df:2e:51:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=65745fce-8146-4c3a-91a1-dc2442357778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:48:35:e1:e9:89:3c:77:78:d0:db:98:a5:4b:
54:51:97:80:36:fa:51:06:9a:1e:6d:78:65:6c:93:
84:cf:05:e5:59:6a:ca:ca:99:d7:8f:81:66:cb:6d:
3b:13:34:b3:fb:41:c7:9d:05:b0:b0:3c:ac:6c:06:
59:42:9f:35:25:47:a4:a8:66:cb:61:99:89:86:eb:
54:d0:2e:0e:cf:8c:cf:e4:bd:da:7e:1b:09:22:52:
dd:fd:b8:37:89:ad:4f:6a:b2:8d:b9:61:f5:68:83:
2d:09:65:a0:2c:c3:37:63:65:f7:59:be:1e:2f:38:
a5:f0:da:6e:90:00:c1:9c:b3:a3:06:05:ad:df:dd:
1a:91:1d:74:79:6e:a2:dc:73:ec:ca:3d:a4:4d:2b:
b3:44:75:34:ab:70:17:47:12:28:cd:3d:06:5d:5e:
fe:f7:ed:52:e9:23:37:6a:79:d3:99:7d:1b:30:9e:
11:86:f2:2e:d1:ed:94:15:8b:56:1b:96:ff:1d:08:
44:b8:8c:9d:a3:c8:11:0f:47:7b:4e:02:26:32:48:
14:fb:56:b8:08:91:98:8a:63:cc:8d:28:48:18:4f:
02:3f:d7:dc:9e:01:3c:09:78:b7:79:b0:06:28:b1:
b6:4c:9b:30:2c:85:8d:cd:9d:21:7e:18:7d:df:c2:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:44:1A:1C:1C:1A:B1:C4:FA:A8:77:B6:53:39:F6:8F:FA:31:2D:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3be00fda-d0c9-3132-8fce-6ccd907adaad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:21:a9:1b:2e:84:bb:43:da:14:54:1b:b0:24:fb:cf:15:00:
5f:ef:ba:5d:c8:16:05:a5:c5:95:96:49:23:99:b1:c0:85:76:
a2:42:de:e0:d4:a8:c9:78:51:79:ce:80:82:51:d9:4b:85:0c:
15:cc:81:dc:f2:24:56:df:29:59:be:ea:c4:50:b1:b3:18:03:
7f:54:e1:12:ea:44:34:84:67:5b:cd:aa:16:69:4d:5c:2b:79:
7c:d2:35:a4:5e:69:44:9f:97:9d:2f:40:32:53:d9:2b:e9:3a:
05:d4:ff:24:cc:c0:1d:f2:13:79:84:7c:5a:f4:41:97:71:f1:
d8:14:20:fe:82:21:72:87:15:d5:7c:f6:9d:1b:0c:45:8c:71:
91:18:e8:d4:77:a8:e2:83:21:94:fb:b9:6a:fb:82:80:c5:00:
95:1b:01:36:73:6d:02:14:1f:24:a5:33:6b:14:a1:52:50:42:
2f:03:22:cc:e9:d8:42:5a:a2:95:c0:4a:c1:37:34:09:5b:c3:
a8:4e:46:96:1e:70:ac:c9:b7:c3:cd:50:c9:68:99:91:5d:38:
4a:10:eb:83:d2:3b:7c:71:22:e0:a7:6e:35:25:72:c6:f2:84:
87:26:1e:7b:1e:54:ca:d0:80:7f:2f:68:be:0d:b5:c4:cc:5b:
5a:bb:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org