Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/99b8b6ae-b961-33a8-9b4d-739df00ddd0c.roa
File: 99b8b6ae-b961-33a8-9b4d-739df00ddd0c.roa (raw, json)
Hash identifier: AWhvsvrJ/XH88ykLMBDLlOEceakMjc1IzaxMj3Smnus=
Subject key identifier: 24:1C:5D:3B:F8:69:BA:31:BE:F7:8E:F3:52:C6:6C:42:65:1D:E3:C3
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583C2A5F69910D08C10E36881500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/99b8b6ae-b961-33a8-9b4d-739df00ddd0c.roa
Signing time: Mon 06 Dec 2021 05:00:00 +0000
ROA not before: Mon 06 Dec 2021 05:00:00 +0000
ROA not after: Sat 09 Mar 2024 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.176.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:2a:5f:69:91:0d:08:c1:0e:36:88:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 6 05:00:00 2021 GMT
Not After : Mar 9 05:00:00 2024 GMT
Subject: CN=385a8deb-94b4-4752-9d39-f3b9390b1722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:e6:7b:99:48:a6:b2:a3:35:23:46:6b:3a:
27:9c:15:b2:17:7d:73:cc:7b:18:0c:de:bc:17:72:
fb:d0:33:2b:a0:63:ae:e4:3c:94:72:b2:bc:58:80:
ad:4c:0a:b6:12:29:94:92:71:07:8a:e1:dd:e0:d2:
cb:2a:41:3d:6e:0d:6b:a9:ae:39:04:5e:aa:6a:70:
4c:47:01:85:98:e3:cd:a7:3f:09:f3:5b:5a:14:a5:
e7:af:07:eb:d2:a7:ed:ac:81:74:48:28:62:a6:76:
fd:aa:d5:d8:b7:43:4e:12:21:5c:4f:a4:b7:51:94:
db:c0:e8:69:05:86:1e:90:0e:88:ff:4b:04:95:5b:
a3:4b:79:b7:ef:3e:37:83:57:ed:0c:85:38:c8:a9:
9b:a6:c1:45:38:4f:50:84:20:e6:0d:54:ad:a6:38:
e2:d4:31:e1:75:72:78:0c:9c:6e:5e:8a:0d:cb:50:
ba:a7:a8:ad:02:c0:38:4e:c8:58:c5:ca:7c:06:97:
51:bd:fc:a9:72:62:e9:81:23:c6:83:0d:56:b4:11:
77:37:27:2f:a8:f0:71:ab:3d:86:47:a8:f7:91:4a:
5a:27:b7:af:f1:ad:e7:84:76:e5:8b:38:3e:9e:3e:
3d:8d:e1:39:0b:a3:52:fa:19:ba:f7:7d:ee:56:fb:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:5D:3B:F8:69:BA:31:BE:F7:8E:F3:52:C6:6C:42:65:1D:E3:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/99b8b6ae-b961-33a8-9b4d-739df00ddd0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:cb:10:5a:40:61:e0:3b:bf:57:dd:37:05:63:a1:59:87:ae:
89:f1:23:46:3f:13:90:3b:9a:73:8f:c7:57:52:10:ab:42:ed:
af:59:5a:01:27:b2:a5:3c:ef:0f:73:83:6a:06:d3:f9:05:46:
e1:fe:77:17:c5:df:4b:d5:73:5e:91:f2:ab:21:00:b0:6b:3d:
76:55:23:6b:ad:60:af:4d:5d:2e:da:79:a7:d7:73:14:b6:5e:
6b:87:65:46:e2:7e:f6:5d:2d:88:d1:5f:69:16:ed:7b:63:29:
29:65:45:b9:98:c4:6e:90:9c:9f:30:5c:fe:06:04:d5:1e:ee:
20:e7:84:99:df:2a:1a:6e:de:4a:3b:59:ed:90:ed:d1:bd:11:
f7:c9:af:46:43:58:1d:d0:1e:5c:4c:1f:1a:d8:88:40:ee:89:
93:5e:23:fb:26:72:43:8b:a6:15:c3:f0:0a:90:96:b2:7e:08:
51:36:b9:27:06:13:40:9c:7f:40:e2:6b:1b:31:be:c4:e7:0c:
ac:ec:98:58:30:40:85:84:5f:f5:db:64:e2:b1:e6:d1:ee:64:
48:6d:e3:13:4d:14:ab:8c:25:fa:a3:d1:15:18:93:9c:26:d0:
60:33:bf:b2:23:9f:db:bb:c7:fe:ad:ee:61:85:19:d6:04:c6:
90:74:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 05:24:56 2024 by rpki-client on console-ams.rpki-client.org