Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89a36836-cf17-3164-b66c-f7c38e701c47.roa
File: 89a36836-cf17-3164-b66c-f7c38e701c47.roa (raw, json)
Hash identifier: /fAUmL+5dq05Ux0cFtpKdn5vyjXunFDOdWJdtJ6rtWc=
Subject key identifier: D9:6C:D4:0D:4F:71:E5:46:E1:26:1B:C5:55:BE:03:9E:13:EC:A4:85
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BD4894630D6190191F6980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89a36836-cf17-3164-b66c-f7c38e701c47.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:48:94:63:0d:61:90:19:1f:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9c1265fe-c9f7-49f8-8755-c39ffd87f5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:7e:09:ef:14:e4:fd:3d:e7:d1:d6:de:1b:
26:f2:ae:42:45:e6:ed:45:63:69:33:23:9e:ae:b7:
14:6a:b3:98:3b:ae:5e:a1:16:db:0f:26:a8:19:3c:
f0:9d:f5:fa:f3:19:b7:91:be:ff:bd:f4:ff:ae:cd:
5e:07:8a:11:0a:ea:1e:ad:11:f7:15:12:bb:ba:91:
d6:60:b7:ac:08:3d:f0:96:42:a4:bb:5c:8a:2e:35:
4d:bf:e5:d4:12:a8:40:7c:5a:61:b3:97:4c:b0:55:
9b:23:33:59:6b:ee:ba:ee:46:17:27:93:e5:3d:93:
75:ef:65:ad:d8:1d:93:45:35:ec:95:d9:e6:98:e5:
d7:25:a0:82:e7:61:cc:df:f6:b2:6a:5c:1e:db:1c:
f4:79:a9:6c:6d:0b:1f:e4:92:6c:25:a2:d6:00:f0:
06:27:ca:a7:ff:4e:ae:1c:69:07:62:76:6f:0c:f2:
7e:72:1f:ac:28:55:15:a5:a2:b0:37:e3:d6:61:6e:
2e:65:b1:ee:96:1e:31:b3:d6:3e:12:20:73:e0:dd:
7f:e5:9c:14:e2:02:b2:77:4a:8c:dd:0e:b2:e3:fe:
99:5a:73:33:31:19:f6:1a:4e:86:35:fd:14:37:58:
94:f5:df:40:6e:73:dd:ef:e0:82:28:f0:26:f1:b9:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6C:D4:0D:4F:71:E5:46:E1:26:1B:C5:55:BE:03:9E:13:EC:A4:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89a36836-cf17-3164-b66c-f7c38e701c47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:5e:6c:8d:1e:27:e2:7e:93:4d:48:b7:b6:10:d7:2a:08:e5:
00:91:f9:63:96:33:0d:6c:90:ef:a2:14:62:ad:2b:28:93:1e:
03:df:a4:70:80:c3:57:e6:aa:ad:a1:71:4b:f9:4b:64:0a:55:
cd:57:55:75:0f:f4:ca:e3:f7:f4:a3:e0:06:f9:84:c7:6d:69:
80:02:e3:7a:4b:4b:58:24:00:c6:30:e6:ae:cd:18:b1:35:e8:
b8:6d:8c:13:99:8e:22:4b:33:1f:7f:6b:f5:71:3a:b2:96:09:
1d:e0:b0:8a:b4:68:45:57:c6:17:65:19:96:22:c1:a9:b7:2e:
c3:fe:50:5a:3c:b7:c2:32:10:62:4b:66:60:a7:f3:7f:a4:73:
78:61:7c:ac:b5:2f:f0:0c:24:da:c7:55:f2:f8:34:99:f6:39:
ee:ed:f4:4f:fd:9d:0c:83:c1:5e:83:a1:25:fd:dd:2b:56:65:
11:93:3f:fe:e8:89:41:56:f7:9c:0a:01:58:c7:11:44:8f:17:
95:8c:43:53:01:58:8b:57:bb:5c:40:45:f2:58:82:31:8c:97:
cd:b0:77:5e:dd:a5:d3:ba:be:29:28:3f:95:28:bb:c5:8c:aa:
4e:06:a1:6c:e2:73:96:8d:8f:5b:57:5a:bc:60:a8:59:53:f2:
c1:a7:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org