Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7ebd5ff4-98b1-3f9f-830a-7a7ee040f35e.roa
File: 7ebd5ff4-98b1-3f9f-830a-7a7ee040f35e.roa (raw, json)
Hash identifier: qJZQgR+EJqoScZuyVDpaquAoCFj4kyYX4B8RIFn8ED0=
Subject key identifier: 58:67:FD:00:74:38:7F:0E:10:C8:68:09:F0:D8:BB:B7:7C:40:71:5B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BD5B941F6F011D679475C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7ebd5ff4-98b1-3f9f-830a-7a7ee040f35e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:5b:94:1f:6f:01:1d:67:94:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=0bf205cb-34eb-4047-bfb3-1f781d55b609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ae:a1:dd:12:20:a2:bf:4d:93:46:1c:ea:b9:
98:88:a3:ca:d9:a1:75:6d:8f:ad:7c:d4:3b:08:0e:
f9:22:16:d6:10:a0:9c:d1:fe:a0:c5:00:5c:ca:93:
e8:a3:4c:fb:7f:b9:d8:ff:2b:e4:be:1d:80:ad:e7:
f1:2a:7f:d9:03:6c:5d:0b:8e:d1:af:ba:59:57:a4:
b1:a2:f6:51:e1:15:cd:19:6b:66:44:8f:9c:0e:37:
f8:23:b2:5b:3a:b6:5a:7a:9f:bd:71:16:10:df:40:
e9:66:b9:45:89:96:e8:ed:2b:99:52:d9:df:46:33:
d8:eb:bd:8d:2d:d3:75:a6:33:dc:6e:6c:8e:b4:d7:
d0:f8:ba:7a:48:41:42:bd:94:8e:13:b1:23:d5:92:
ed:f8:d8:84:b9:67:82:7b:ca:05:dd:9d:ee:03:27:
61:72:55:c5:a4:68:d3:48:75:ce:b6:ed:e5:a7:11:
ed:e6:55:36:a9:8c:f9:af:b8:66:93:a7:ed:77:c8:
01:83:4c:62:0e:f1:bc:12:65:6c:0b:46:e3:60:ad:
16:fc:19:33:8a:15:31:b7:7b:8a:73:71:b5:58:e3:
91:c1:74:16:0a:ad:12:5e:9c:a6:cc:1d:18:21:ed:
12:1b:42:ca:65:b9:1a:64:e7:df:11:49:35:39:aa:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:FD:00:74:38:7F:0E:10:C8:68:09:F0:D8:BB:B7:7C:40:71:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7ebd5ff4-98b1-3f9f-830a-7a7ee040f35e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:46:95:0a:5b:f1:d1:7e:12:94:5b:5d:c7:2c:26:7a:ba:43:
ba:36:5c:73:c9:90:bd:04:d6:08:3e:26:39:6f:ab:44:76:cf:
22:11:6c:a1:88:24:e1:90:b4:a0:5a:ae:a7:14:97:f3:3c:88:
53:89:cf:c6:38:54:3e:86:a7:00:d2:de:04:ed:f8:3f:08:f8:
2a:a3:04:2b:1c:6e:60:eb:1d:78:2b:05:75:18:e7:a3:ba:86:
31:5c:5a:db:7d:05:66:be:bb:7e:d5:a6:1d:31:ae:ca:b9:35:
e2:8d:2a:95:8b:28:cf:2f:e7:fd:b6:b7:8d:c3:2d:3e:5e:c6:
14:fb:92:cc:37:36:1d:60:71:55:c0:57:dd:f5:cd:f0:65:0f:
fa:31:6a:87:0d:05:16:98:53:62:c8:97:d8:a4:18:f8:91:39:
56:62:2e:b6:db:1d:2f:3c:15:48:95:20:3f:a6:7c:dc:05:f1:
8c:9e:c5:1e:61:7f:a6:d8:fb:c4:1e:9e:01:f7:36:b9:ba:1a:
97:ca:53:0b:20:58:f5:b2:64:00:f9:96:26:7a:50:11:26:45:
60:95:b1:d4:a6:c9:34:a9:76:35:10:66:2a:f4:5c:6c:96:f7:
ab:59:64:18:69:16:91:c6:33:ff:3a:28:b3:54:7b:9b:63:c0:
75:9b:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org