Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/990e3229-a80d-32a8-ba52-e1385c0cec9a.roa
File: 990e3229-a80d-32a8-ba52-e1385c0cec9a.roa (raw, json)
Hash identifier: 84S6QPFQ87viE9bu3q11asiE2jDTcucYnXz/jMk9Sps=
Subject key identifier: BE:4C:20:0D:BD:1B:F7:2E:6B:BD:0F:86:AA:A4:40:40:2F:88:53:33
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BD02917441E2CD0D8CF400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/990e3229-a80d-32a8-ba52-e1385c0cec9a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:02:91:74:41:e2:cd:0d:8c:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=43a1546e-cad3-4f68-beda-961b64efcb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:10:3c:e5:19:12:3f:65:d3:49:a5:73:b3:
09:b9:44:73:af:75:23:8f:c5:28:04:44:61:72:94:
7a:85:21:ae:c8:8b:e5:54:de:29:e8:77:87:a8:5b:
a5:87:69:b8:bd:7e:27:cc:df:78:05:0b:d6:e3:5a:
32:e8:5b:d2:b3:f2:c2:6c:79:f7:9d:b8:7c:84:39:
b0:0c:fd:8b:b5:9e:1b:e6:b5:6e:0b:b6:cb:da:a4:
b4:e0:75:f1:05:b4:54:b4:a8:94:f4:d0:44:58:e1:
d9:eb:98:0a:78:40:52:54:5a:1d:85:6b:b8:36:79:
fb:da:4f:1d:e0:13:dc:18:c1:64:11:27:af:4e:9e:
ca:ec:81:31:d9:1f:b6:ba:d2:f0:43:dc:b9:5a:7e:
a9:00:2a:4d:c9:44:2d:dd:dc:4b:15:e8:20:4a:aa:
37:9b:3e:9e:a4:89:6e:24:f8:ce:8a:49:04:f0:7b:
d5:59:8d:19:36:1b:e5:db:37:fb:7e:33:9e:c5:d7:
36:5e:98:38:18:8f:8b:1f:b7:13:16:97:37:92:d2:
8f:2f:d7:7f:fe:78:42:59:38:55:05:6c:ba:40:4c:
ed:6c:32:cf:ca:43:0c:2f:51:59:af:c4:82:cf:fe:
9b:ab:f5:e5:25:f8:21:e9:ef:22:f7:d8:37:8c:f3:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:20:0D:BD:1B:F7:2E:6B:BD:0F:86:AA:A4:40:40:2F:88:53:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/990e3229-a80d-32a8-ba52-e1385c0cec9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:d9:f5:6e:4c:b3:d1:2c:4e:78:b1:fb:35:58:be:60:af:e3:
9f:65:15:c4:b0:b8:19:b1:3d:52:24:df:5e:4f:81:f7:53:dd:
72:3e:88:aa:5b:1d:22:ce:2c:ce:ed:57:ba:59:a1:9c:c2:2e:
fd:d5:c8:f3:0d:4f:c6:d4:1a:78:f2:90:1d:cb:a8:68:2e:2d:
c8:d9:2a:25:56:41:15:fd:0a:db:72:53:a3:20:8e:d8:1f:06:
5f:52:20:40:68:44:58:0b:bd:11:ce:26:bf:c1:35:ce:12:88:
c1:42:01:56:91:84:e4:02:7a:1d:37:6a:86:64:97:de:d6:ef:
65:70:72:59:d7:90:82:0c:c8:ff:8f:39:47:08:99:22:df:6c:
fd:fd:f1:e0:6b:73:33:38:1b:9c:4c:9c:9d:8a:3b:b5:9c:5d:
2d:7c:20:1e:b4:0e:e1:ec:04:3c:59:0f:8e:8f:ca:f5:61:38:
bd:ab:da:eb:3a:b3:03:cb:fb:14:21:b0:02:fc:e7:6f:4b:ab:
5a:10:ea:a3:1b:2f:f7:2e:59:04:85:fd:48:dc:0c:48:f1:a0:
8e:21:2b:31:e0:47:cb:f8:a7:4a:3f:9a:8f:c1:90:7b:2c:db:
01:31:14:6d:a8:0c:26:93:3e:4e:20:5a:b2:f0:16:8c:e7:b2:
17:2b:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org