Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c19282d-4522-31db-ba11-3dbbb019bfb5.roa
File: 8c19282d-4522-31db-ba11-3dbbb019bfb5.roa (raw, json)
Hash identifier: B63bB643TT1IB7XQCdZPJZtfPGp9xbxP87JORLpM0bM=
Subject key identifier: D3:20:0D:9D:4D:D7:C2:18:07:FA:53:C7:D6:C3:E6:F0:79:7D:A2:4F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B1D7266B60B1FCC8F03EC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c19282d-4522-31db-ba11-3dbbb019bfb5.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b1:d7:26:6b:60:b1:fc:c8:f0:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=13987b59-024c-406f-96cb-d027c798e5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:f1:e3:e5:84:c0:bb:c9:ab:f3:fb:fc:7c:
25:aa:6e:b7:c4:a5:05:bc:99:5c:bb:c8:54:af:6b:
2d:f6:f2:b8:35:85:e2:8b:02:25:30:2a:c4:d9:97:
33:e2:55:23:da:4d:ee:4c:0e:84:e9:e3:c6:05:fd:
03:f8:4a:20:d7:ec:5f:f6:00:b5:56:02:9e:f8:0a:
be:83:4f:1c:43:26:63:2d:7e:31:bd:8b:94:d9:df:
72:f5:33:97:3a:40:81:20:87:29:fc:9e:57:cf:0b:
92:0c:c0:0e:8e:1d:7d:26:2a:50:de:8b:9b:ba:2d:
2d:fb:8d:d5:de:53:d7:7c:3e:6e:d2:d5:be:09:9e:
63:63:3c:c8:69:95:5e:55:1e:ec:b9:7c:b7:f2:35:
53:c2:2b:14:a1:85:a4:21:e3:5e:31:19:8f:c5:dd:
01:78:ca:36:4e:f7:b3:8c:08:71:d8:95:b0:ad:f1:
38:07:d6:5b:34:86:92:47:4c:c8:ae:1c:36:dd:57:
66:f6:26:1d:7c:0d:4d:40:38:e0:61:4a:3b:21:fb:
c6:14:5c:eb:d0:12:54:b9:a4:f2:2b:c9:e9:44:07:
3f:92:81:ae:e9:87:72:2b:7f:41:87:25:eb:c6:0d:
c2:87:03:ab:55:92:5a:bb:02:1b:bc:15:4a:57:fa:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:20:0D:9D:4D:D7:C2:18:07:FA:53:C7:D6:C3:E6:F0:79:7D:A2:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c19282d-4522-31db-ba11-3dbbb019bfb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:c5:30:6c:98:80:d6:19:ee:fd:cb:c5:84:8b:42:44:ad:11:
3e:2f:06:7e:72:62:35:1d:d6:7c:14:92:67:2f:8f:e5:47:47:
66:f5:25:a7:07:a3:f8:2e:06:8c:37:13:c7:08:26:be:c5:a4:
1c:f4:ea:45:92:be:19:69:a1:25:6b:1d:09:30:05:35:3e:45:
06:1d:3e:81:89:ed:33:1e:ce:89:b6:b4:31:16:c9:84:59:d0:
3d:98:bc:d5:4d:48:c4:58:7a:a5:b0:3a:14:61:87:dc:01:c7:
2b:b9:3f:a3:cd:00:c4:c9:21:03:93:fd:91:4b:59:48:62:c4:
ad:63:14:94:bf:db:cb:58:03:56:12:76:09:20:f3:be:c6:e7:
26:4e:85:05:42:f3:3c:ec:c2:00:3e:d5:6d:4c:d8:8e:f4:2c:
5f:2b:4d:39:08:ec:34:82:c4:11:9e:9d:c9:84:7a:d9:62:98:
3b:ca:61:12:65:b7:81:ac:f1:85:a0:af:78:c7:2d:b0:86:64:
e3:20:f2:bf:6b:bb:ca:7e:e0:91:c2:06:34:a1:5a:49:e4:47:
f4:fb:26:61:db:9e:f9:00:91:3d:8b:4a:c8:ec:93:a7:e3:62:
a7:15:b0:df:cb:b9:40:da:90:b0:90:e2:75:42:a2:92:fe:b3:
2a:17:c2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org