Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4d0c0b0b-9b70-3e37-890a-2324d738681d.roa
File: 4d0c0b0b-9b70-3e37-890a-2324d738681d.roa (raw, json)
Hash identifier: APytbOkptateW5btlDwuKP3qeF7W7mlGBKSp/oCSQkg=
Subject key identifier: 8A:21:28:82:F8:0D:B9:01:29:A0:F7:EE:24:45:21:1D:00:07:99:31
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583C2A5F83251284054D5921B180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4d0c0b0b-9b70-3e37-890a-2324d738681d.roa
Signing time: Mon 06 Dec 2021 05:00:00 +0000
ROA not before: Mon 06 Dec 2021 05:00:00 +0000
ROA not after: Sat 09 Mar 2024 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.138.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:2a:5f:83:25:12:84:05:4d:59:21:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 6 05:00:00 2021 GMT
Not After : Mar 9 05:00:00 2024 GMT
Subject: CN=c1e84be9-bc5d-416d-9e8c-53daef977408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:b4:fd:90:08:70:b4:fd:a6:53:12:95:18:
cf:02:3e:43:99:c9:43:61:92:cc:75:96:5d:3f:5d:
d8:ec:02:f7:fd:02:a2:09:08:0e:df:81:79:9d:d7:
85:79:b2:cb:91:6b:e5:7e:37:eb:85:31:04:7a:ad:
1a:ed:54:ec:9e:00:34:eb:7d:54:64:fa:75:60:b6:
13:a0:1b:87:13:96:37:e0:9e:a9:22:f9:52:3a:9b:
2c:7f:5f:ba:aa:f2:fd:c1:8f:7b:e5:0f:ba:97:a5:
3c:c6:7d:62:e5:59:56:8c:11:27:6a:08:23:6b:b1:
2a:75:e6:8f:75:92:9d:40:5c:48:f8:d1:2a:49:9b:
7b:03:92:55:f6:9a:d3:33:c7:71:92:2e:be:e1:88:
68:9a:4a:90:5f:e9:5b:72:79:44:3b:ad:a1:ef:e6:
8f:b6:34:e1:b3:0a:d2:22:9c:11:08:79:e7:1a:95:
aa:f0:18:68:da:df:57:67:c0:58:47:fe:db:ea:b1:
e8:43:a8:96:f7:c8:6b:7d:db:f1:05:40:f9:59:9b:
9d:0f:86:87:5f:73:69:6e:5d:cf:9e:17:37:7b:c1:
9c:a4:c7:3a:19:18:7e:25:b5:3a:06:91:46:e4:7c:
2b:f7:c2:fb:51:79:46:4f:1a:47:cd:95:85:a2:73:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:21:28:82:F8:0D:B9:01:29:A0:F7:EE:24:45:21:1D:00:07:99:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4d0c0b0b-9b70-3e37-890a-2324d738681d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:00:cc:2a:e5:8a:80:b4:5a:f0:f5:b4:7b:d7:51:f3:f9:1a:
a1:47:a2:61:34:e1:83:e8:72:bf:dc:27:de:4c:4d:76:23:3e:
0d:3f:e3:56:e8:5e:0a:4d:f6:52:1e:b0:b1:3b:b3:b4:c0:13:
92:39:48:8a:72:35:ce:d2:0a:1c:31:78:54:56:fa:96:f1:5d:
2a:32:13:de:c5:7e:b9:f2:bf:e6:0f:1f:c6:31:03:a7:29:8b:
85:4c:36:03:93:8c:f0:a2:84:6c:c6:50:be:ab:10:4b:7c:79:
45:3c:b6:ef:9c:73:24:7b:38:1f:61:b3:b0:06:b9:f5:97:31:
9b:9e:61:26:3d:23:c4:16:9d:1d:74:88:34:2c:0d:8e:9f:30:
d0:2e:dc:54:eb:74:df:b7:af:72:2b:5b:34:ca:17:e0:0e:f8:
df:54:c8:34:30:dd:2b:63:58:17:0c:8b:e5:28:d7:74:c2:32:
20:32:57:ff:60:2a:65:b8:28:1b:fd:23:d5:f9:8a:cb:e4:92:
d9:6e:31:01:42:15:1e:f1:a8:9c:1c:e7:af:21:64:1e:d4:a4:
80:25:2c:a2:95:7d:ac:ad:5b:1b:cf:fd:20:b2:e4:85:64:52:
40:00:b1:cb:93:fb:46:96:2e:16:37:f1:91:c5:74:cb:1a:4d:
6e:97:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 05:38:57 2024 by rpki-client on console-fra.rpki-client.org