Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5f433c1e-e844-3f6b-b83c-ae25290a22c9.roa
File: 5f433c1e-e844-3f6b-b83c-ae25290a22c9.roa (raw, json)
Hash identifier: WUM56pwUG0NFuL+mhi5eDrpSp8BwtLGk45vEAPk9RVk=
Subject key identifier: 57:CF:DC:BA:95:C1:FB:2F:4C:23:74:48:FD:39:11:AF:9F:85:6F:5D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BC89A8913506544A198280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5f433c1e-e844-3f6b-b83c-ae25290a22c9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bc:89:a8:91:35:06:54:4a:19:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=05bb56a4-53fa-42b0-9cb7-402418e42a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:87:e4:bc:19:1c:1a:5c:d9:2c:f4:54:35:
68:b9:a7:80:fb:b3:8f:9a:cf:28:13:aa:cd:17:c7:
f3:a3:b4:e9:55:4a:71:e6:19:6a:00:be:9c:4a:77:
c4:70:ea:b8:63:74:ab:a8:8b:95:a9:54:04:c6:f3:
e6:3d:27:1e:66:2a:af:96:a9:50:dd:7f:ba:05:c5:
6b:aa:c5:64:f5:e1:c8:73:3b:2b:50:49:cd:4d:ac:
cb:67:df:ab:d5:f1:f4:ff:df:1e:a2:03:25:8c:59:
1c:7c:b1:60:27:b4:ad:1f:ea:19:cc:3f:05:eb:59:
f8:35:20:dd:ec:63:59:e7:f5:13:19:0f:02:64:35:
e0:79:d8:30:37:aa:2c:14:a9:d1:6f:11:a3:5e:7f:
46:55:90:04:12:cc:72:37:ad:20:dc:37:14:c0:2a:
01:c4:ee:5f:f1:38:6a:e6:9f:95:d8:71:97:81:71:
cb:ed:a1:5c:46:88:b2:2c:f6:f7:43:21:02:4d:ef:
ea:2c:1b:4d:a1:52:d3:75:82:c2:18:6f:3c:71:9e:
d6:8c:3e:e5:23:a5:a1:16:5f:e8:5e:21:f9:b0:99:
16:72:1a:43:f0:f0:a4:86:8e:37:aa:da:59:83:6c:
41:43:1f:24:70:e7:2c:db:83:7c:4a:68:6a:cf:c7:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:DC:BA:95:C1:FB:2F:4C:23:74:48:FD:39:11:AF:9F:85:6F:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5f433c1e-e844-3f6b-b83c-ae25290a22c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f0:c3:96:e7:90:1c:76:b8:3a:24:da:de:c5:46:0b:8f:67:
05:c1:8d:0c:c4:7c:a2:a1:fa:85:9e:a9:f7:54:f9:13:09:3b:
13:d4:f0:1b:69:46:25:21:4c:96:27:01:72:04:0d:dd:59:4f:
85:e1:4c:72:8b:66:92:7a:48:14:43:aa:63:82:75:b2:a7:14:
ce:8e:9b:11:88:d6:7f:08:d1:0e:2b:29:72:a7:41:c0:80:a9:
9a:05:8f:09:c0:af:37:1e:3b:ba:cf:66:5e:5d:40:38:1f:93:
7d:83:66:54:16:06:e7:64:b7:c5:59:58:d7:cd:a6:50:26:d8:
e1:da:06:bf:8f:55:3b:48:c0:3f:d3:43:10:e0:51:fa:c5:66:
8a:7b:96:8e:be:08:d2:b4:22:0d:9f:00:ff:48:de:c9:93:e6:
10:4f:7f:76:59:95:e7:47:d1:d5:21:4b:dc:6f:bc:48:c0:fd:
cc:dd:b5:c5:d9:67:80:8a:eb:82:39:ad:28:83:33:bf:e7:8d:
8f:a5:8d:bd:47:cc:f7:14:64:80:71:98:41:7e:cf:32:91:6b:
8c:ba:e1:63:4a:81:36:0e:e0:ee:04:ba:b9:29:19:0a:92:97:
02:02:08:6f:35:c6:7b:65:d5:83:3c:c7:ef:56:1d:11:65:ba:
be:16:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org