Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cd5cbaf-14e7-37d7-a3fd-0ef36a619257.roa
File: 5cd5cbaf-14e7-37d7-a3fd-0ef36a619257.roa (raw, json)
Hash identifier: GjnqOYFGEYdX3QRufmfx7QPfBSHpnTk9TU4RFCEUpTE=
Subject key identifier: D1:6B:0C:AF:2A:08:DD:26:76:94:A8:41:45:85:66:2C:21:C1:B1:F6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BDC7ED3FF31EC9E0732640
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cd5cbaf-14e7-37d7-a3fd-0ef36a619257.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:c7:ed:3f:f3:1e:c9:e0:73:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e436f16b-51f8-45dc-a908-791ac77dce4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:29:98:2f:44:73:20:5e:a5:43:53:28:7f:
26:9c:cd:13:77:96:91:e9:cc:e7:ac:b6:b9:74:54:
92:e1:d1:f4:ba:e5:fd:08:4b:43:9e:b1:89:1b:70:
72:02:94:aa:dc:9a:63:de:fd:2b:f1:0c:aa:6f:58:
ed:59:34:ef:fb:90:dc:1b:84:7d:00:57:f6:16:76:
a1:af:d4:15:7b:1e:93:f7:3c:5c:45:24:cc:ed:f5:
b9:51:81:52:67:97:1e:01:b7:ee:91:9d:90:97:ba:
7e:16:17:b9:22:06:27:a1:ac:2f:2f:b6:b4:eb:56:
d0:0c:a7:9f:92:53:a4:56:cb:7d:2b:c0:9a:53:18:
13:d9:59:7d:5a:6e:ac:d3:88:ea:96:8b:9f:e5:a0:
1c:fd:e9:b8:fe:4b:71:e2:01:79:2e:d3:63:f0:63:
7e:db:3a:91:26:f7:3b:d3:59:4f:4c:3c:c7:9d:fc:
6b:a1:8a:ce:02:d4:e8:04:4b:10:1f:12:e1:f7:45:
d1:bd:8b:83:ff:89:e8:14:6a:6c:f2:6d:9d:d8:5d:
07:64:44:7d:26:8e:a0:c4:3c:01:90:c0:6f:48:39:
25:21:a2:7b:bd:25:6b:c7:17:aa:be:2c:8f:56:97:
d3:9c:5a:fc:59:61:7c:b7:d4:80:0f:41:d8:d1:f6:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:0C:AF:2A:08:DD:26:76:94:A8:41:45:85:66:2C:21:C1:B1:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cd5cbaf-14e7-37d7-a3fd-0ef36a619257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:7a:1f:58:b6:61:ed:08:c3:06:46:9a:99:cf:86:73:b4:64:
9b:9f:87:f6:45:66:62:9f:2c:71:ba:ff:64:89:52:36:4f:1e:
b0:65:97:55:11:3a:be:45:93:8b:69:43:48:a3:2e:64:33:d6:
1a:3c:c3:8b:c1:ec:d3:c0:ae:c8:a5:b0:26:7e:c5:5c:0d:40:
f5:da:ed:7a:06:2d:3f:35:74:8a:d1:1c:2b:c5:df:6c:b1:a3:
1e:b5:c4:e9:f3:6d:70:25:95:44:8b:7b:08:97:c1:3c:9d:5a:
54:01:c5:a1:d1:5f:27:a7:52:9f:1e:6b:66:ec:3e:57:c3:f1:
c1:ca:a5:79:e7:10:4d:2e:65:57:4f:ae:c6:d0:2a:85:f3:d3:
7a:75:81:e2:74:40:a2:26:f5:55:df:b1:6e:a0:f9:87:fa:04:
cd:bc:5a:6d:78:83:e3:bb:e7:35:f6:70:d6:46:9b:bf:fe:8a:
01:1d:43:dc:2a:73:db:76:f5:46:43:7c:c9:ce:d6:a8:d4:a5:
16:d7:0d:5d:78:37:09:fc:2a:e4:4b:08:43:32:6b:9b:be:97:
dd:a2:c5:ec:6a:36:83:3f:88:e2:64:14:bb:6e:c9:a6:12:13:
af:80:78:d1:e6:b6:fd:e2:b7:df:4c:81:59:e9:47:26:c4:e4:
7f:79:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:34 2025 by rpki-client