Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/655a65a1-a7e7-3cee-bee8-ad956ff25ee5.roa
File: 655a65a1-a7e7-3cee-bee8-ad956ff25ee5.roa (raw, json)
Hash identifier: cvgGI9HfCnhI4bzVQnF9REvvYjCM9NaTqIJ8lACwtoc=
Subject key identifier: 70:E8:F4:BE:B7:6D:B8:52:86:64:2B:53:FB:D8:9A:E2:FB:24:F8:97
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A9D3ACA9CBA7B2C81EF480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/655a65a1-a7e7-3cee-bee8-ad956ff25ee5.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a9:d3:ac:a9:cb:a7:b2:c8:1e:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=418ebeeb-0ec6-49c3-9c2e-19970007468d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:3f:fe:e2:f4:54:ed:ac:6f:78:76:1c:d0:
c9:8c:43:8f:b6:e2:1a:65:75:b5:07:4f:02:59:0d:
1d:b1:f3:7d:96:8f:1d:eb:b8:4d:34:dc:c7:80:4e:
c3:41:79:62:05:d9:ca:35:b8:e9:0b:dc:47:20:e5:
cf:48:d1:4a:48:ae:55:7e:73:7d:f2:24:6c:e0:29:
3c:7d:6b:d2:b9:4e:46:cd:eb:4e:ab:07:be:13:24:
f4:77:b7:c5:ac:3c:bf:77:92:8b:04:25:97:51:20:
c7:b1:52:cd:d8:d2:a6:11:17:9b:62:75:6e:25:39:
67:38:04:b3:63:87:77:e4:26:2d:50:e5:26:78:7b:
fa:22:00:a5:a3:9a:84:de:c6:8a:fb:dc:31:be:54:
00:8d:a8:40:34:66:53:ed:0e:ba:6f:db:75:05:60:
76:65:f4:0e:dd:d0:49:9b:99:86:fd:dc:ab:86:ac:
ef:62:74:61:fb:d3:c8:fd:38:ca:96:5e:b1:41:d2:
ea:c2:e5:2e:6f:71:2e:6e:bd:0d:c0:e0:b6:0c:c3:
14:82:ca:28:24:31:69:ac:dc:dc:ed:c9:29:71:5a:
40:61:5e:06:6c:8a:d2:8b:96:8b:d6:d5:40:4f:5f:
4a:42:48:cc:47:8b:25:fe:af:b1:35:71:c0:2a:43:
6c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E8:F4:BE:B7:6D:B8:52:86:64:2B:53:FB:D8:9A:E2:FB:24:F8:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/655a65a1-a7e7-3cee-bee8-ad956ff25ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:07:a0:75:87:42:32:33:34:37:0c:27:5a:1a:e9:df:9b:3a:
e6:d3:47:c2:b2:ef:8b:d8:2a:4c:ad:bd:6a:0c:11:f6:20:0a:
b2:20:18:8e:31:85:70:33:5a:17:05:b9:c8:00:11:f8:46:75:
e5:e4:af:e3:18:2f:ee:59:db:53:69:a0:21:b2:df:5b:fd:0e:
f0:62:cf:8e:46:b9:4d:5d:b0:71:5c:83:88:f0:4b:9a:fb:e5:
b6:75:0b:a6:13:5c:08:6f:e8:85:ee:2c:69:14:16:54:ff:9a:
35:59:c5:98:36:0d:ba:dd:53:7a:2c:d3:bc:a5:44:2e:27:cc:
f8:dd:fd:aa:00:af:61:42:f1:c3:a9:db:2a:37:ef:b4:22:a9:
e9:13:51:8f:1f:17:7e:4c:ba:b9:c6:7f:2f:52:1e:0a:bc:ae:
37:a9:be:91:6b:41:d3:73:1a:9e:8f:41:bd:ac:66:38:ad:89:
96:c2:67:26:35:ff:bf:6f:5b:b6:e1:3e:7b:80:f4:01:a2:a9:
3e:9e:16:29:42:11:13:a4:4c:99:bf:10:be:06:8f:4f:58:0a:
68:dc:6e:6d:d6:0d:9c:7b:68:dd:00:80:39:e0:26:d5:da:8e:
be:0a:95:90:56:9e:36:9c:c2:44:a6:ff:e4:62:8b:f5:da:0c:
4d:6a:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org