Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65efa4f4-2435-3358-be6a-a37ab0412228.roa
File: 65efa4f4-2435-3358-be6a-a37ab0412228.roa (raw, json)
Hash identifier: SDHLl+HfWf0hGJpOUAY5fBTDXzmwTiKWpaVS5501xAM=
Subject key identifier: F1:32:97:33:EA:E1:31:58:61:09:6E:97:35:3F:49:AF:74:4A:40:F4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7AE1B5E62ADC8DBD8172A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65efa4f4-2435-3358-be6a-a37ab0412228.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ae:1b:5e:62:ad:c8:db:d8:17:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d8e50da1-aace-4593-a949-a859c95ec89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:de:17:44:cc:aa:dc:c7:9f:5c:d7:fb:14:
81:e6:f3:29:05:9f:bd:b9:13:20:b5:a2:84:fb:bb:
43:c2:99:db:96:b0:88:d1:bf:82:f2:9c:e0:d4:30:
28:17:e1:54:72:47:46:ed:b8:bb:87:9f:80:1c:b7:
e5:9b:9e:89:aa:c5:8d:e1:b9:31:9b:7f:98:27:93:
42:6c:4e:ac:b1:b2:28:94:99:fa:5d:32:b9:5c:48:
f6:f9:2e:3e:db:e9:ff:7a:87:ae:2c:6c:66:2f:e2:
92:01:1d:b9:5c:61:e9:cf:3a:dc:8e:67:77:b8:b0:
cb:61:59:1e:10:9b:a9:2d:09:96:dd:71:13:b0:a8:
0f:93:f3:26:cb:5c:68:76:41:ec:4a:34:ae:cb:ed:
36:fb:a4:3a:56:43:02:bd:f2:a8:ec:a2:02:37:93:
51:31:3c:7f:85:df:b0:b2:d9:ac:9d:19:1a:4a:30:
ff:27:66:c8:7e:20:4b:ac:e4:79:88:54:90:cf:64:
8b:98:ce:f2:29:d8:38:d8:32:de:a9:a7:d5:38:ef:
46:7c:be:31:c0:25:66:7a:46:37:89:30:86:04:6f:
ea:a5:f7:65:46:0d:55:94:7d:9d:6e:47:1c:ba:94:
e5:85:91:cd:fa:f9:7d:80:c9:8d:69:de:ee:82:93:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:32:97:33:EA:E1:31:58:61:09:6E:97:35:3F:49:AF:74:4A:40:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65efa4f4-2435-3358-be6a-a37ab0412228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:a4:19:53:88:76:a8:e4:e4:35:95:c4:d4:8e:c6:46:fd:de:
f3:63:c1:83:87:92:aa:dc:16:02:21:11:cb:71:99:7a:67:e1:
c8:42:b8:62:9c:e1:50:c5:9d:45:40:6d:20:e1:c7:1c:b5:53:
f9:91:43:0d:d8:41:ba:18:45:c7:4e:46:3c:a4:4b:a2:2b:bb:
dd:ca:25:40:dd:7f:95:7a:e3:59:a9:a8:be:74:b3:0d:10:c1:
d2:a6:ea:40:57:7c:fd:ec:04:c3:b9:e1:20:a8:d1:a5:f7:15:
a2:16:fa:60:4a:e8:83:9e:4c:93:a6:2f:00:b6:a3:c0:53:f0:
77:75:41:ea:4e:fc:9b:a0:fd:0e:50:4d:e4:0d:83:92:ec:67:
cb:a4:d3:c1:6a:df:7b:cc:f1:a8:fd:b2:b3:46:ff:58:b6:bc:
96:5e:b2:e9:19:86:14:a8:72:d4:3c:28:ca:69:22:d8:24:f9:
e0:74:97:cb:6b:c3:78:ae:d9:ef:65:2a:7b:a7:ed:e6:d3:56:
14:1a:4c:c6:b2:42:f6:73:89:29:f2:f5:25:74:a0:33:ca:f4:
e3:7f:45:ad:3d:71:70:fd:91:c0:27:d6:c1:40:23:11:1c:c7:
12:02:59:6e:fe:1a:b7:82:ae:f0:7b:ca:a9:62:e7:70:a8:32:
5e:da:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org