Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61b86ef6-79bc-389b-b596-3ae80b2ee145.roa
File: 61b86ef6-79bc-389b-b596-3ae80b2ee145.roa (raw, json)
Hash identifier: Kq1NNt+AqpL1XzhIjJKbncVz/wWAZc2HT+276lfzlL8=
Subject key identifier: 83:20:E2:97:C3:1A:79:E9:C9:96:4F:D2:FB:43:9B:AA:4A:58:55:EA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BA3359B09C41B71A79BE80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61b86ef6-79bc-389b-b596-3ae80b2ee145.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:33:59:b0:9c:41:b7:1a:79:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=72317e99-b201-4cc7-bd4c-e53c50c0538c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:7b:28:6f:32:70:bf:21:a8:e8:1c:fc:2e:
9b:01:0c:f7:77:03:44:97:14:49:d3:9a:36:9f:27:
17:f6:6e:50:87:7c:a6:ce:c0:83:3f:ae:71:3e:d6:
d5:66:4d:6f:3e:f8:49:c0:48:f1:99:7c:ec:4d:9c:
93:c7:99:30:2d:eb:9e:88:de:e4:e1:39:22:25:36:
98:7e:10:16:b6:b1:9a:0a:39:98:c1:6f:fb:b1:18:
e6:cd:29:3b:7e:1d:77:ab:13:17:14:14:54:fd:f2:
31:a6:b9:dc:4e:36:05:17:6a:c9:4e:1d:97:fe:06:
eb:f6:47:62:f9:00:c6:16:3c:ef:cc:52:a8:05:6c:
41:a2:44:fd:7e:1d:c3:7a:bb:ec:82:74:97:54:c3:
1e:f9:8b:2f:c5:23:96:5e:b2:b4:34:fb:9b:05:0f:
3f:3e:cd:2a:94:86:23:d4:11:7d:0d:cf:7b:2a:23:
9e:52:7c:6f:f8:e1:3a:1c:df:d9:96:bd:85:fd:17:
41:4a:4d:14:64:b4:39:d5:d2:d0:eb:91:20:87:34:
ea:12:10:58:6c:14:3c:2d:78:30:a1:2c:73:20:74:
48:87:36:83:a8:37:f2:45:0a:ff:ee:44:b8:dc:47:
ad:c5:cd:1e:9a:14:83:b3:3d:e4:e4:35:03:22:04:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:E2:97:C3:1A:79:E9:C9:96:4F:D2:FB:43:9B:AA:4A:58:55:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61b86ef6-79bc-389b-b596-3ae80b2ee145.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:b5:49:8e:5a:44:60:b8:d9:26:ad:a8:18:ee:0c:9e:e0:c9:
aa:be:6b:07:d4:2e:48:00:fc:d5:cf:28:8c:cd:a9:21:4e:ab:
51:51:4c:0a:60:ad:be:8c:bd:1a:e1:05:59:fc:ac:ab:39:58:
04:be:69:12:d4:b9:a4:0c:a7:e6:f5:b2:16:a6:96:d9:79:11:
de:ac:3b:c1:de:38:ad:d0:00:92:97:1d:ae:42:91:d2:51:54:
a2:59:20:85:5a:dd:fe:b6:de:cf:7f:a4:58:5c:51:81:ac:d7:
3d:23:99:a6:7c:be:52:b8:97:71:1e:b4:c9:45:5f:4b:92:69:
75:8a:4e:6a:dd:1d:bc:ea:0d:ca:36:ab:c1:a7:47:fd:4c:bc:
1e:b4:e8:b2:7e:ed:e2:1b:63:46:8a:c0:e2:33:8a:d4:26:4a:
9f:2a:fa:ff:03:52:0f:db:ab:0e:0e:b5:91:ba:d5:0d:49:12:
25:d2:5e:bf:71:09:07:b4:6e:31:55:12:f0:1b:f6:ac:b8:4f:
54:99:5d:cb:88:30:b3:93:76:d0:57:7b:f4:04:bc:4d:20:5d:
db:67:90:67:54:1c:9d:19:37:4f:ba:fe:12:ff:1d:db:9d:49:
d4:ff:9e:65:8b:b8:15:79:0a:b3:05:4d:13:64:c6:b8:e3:3e:
f2:36:04:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:12 2023 by rpki-client on console-ams.rpki-client.org