Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9a5ae7be-89bc-3add-a1f4-ddf31ddbc717.roa
File: 9a5ae7be-89bc-3add-a1f4-ddf31ddbc717.roa (raw, json)
Hash identifier: F265TWeY+bB9hcenW5xEhfIixpy1hS8DHJI4mtgzZU8=
Subject key identifier: 82:AE:D7:30:20:9B:2D:30:38:B7:09:11:D4:41:FC:EA:30:BE:85:AB
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BA20303DFD4DED375D9A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9a5ae7be-89bc-3add-a1f4-ddf31ddbc717.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:20:30:3d:fd:4d:ed:37:5d:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9c8bb75f-4767-459a-8567-f453c7f1f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:17:cf:6e:f9:44:bd:f1:6e:46:00:ae:09:
18:2a:7d:de:7c:fd:b7:35:d7:b7:dc:51:80:82:ca:
c3:61:33:2d:36:b8:be:0f:c7:d4:9f:a2:35:38:5c:
e7:e0:d0:82:48:ae:8a:21:c0:71:2f:df:29:9c:af:
ae:12:2f:07:c9:4d:6e:aa:6d:95:bc:a3:03:d3:2d:
b1:e1:b8:fa:04:c3:32:dc:43:c7:af:10:13:59:15:
71:50:15:29:e1:f7:7d:7b:fa:24:8a:47:40:b6:5b:
46:39:d3:d1:f8:91:83:cb:19:a3:0e:d5:b7:e3:a7:
6c:c2:3d:9c:8b:3d:bf:5b:fe:f8:87:37:94:eb:e8:
00:1f:6c:85:d9:73:82:f9:2e:88:dd:0a:7d:b1:e4:
2a:05:2e:7d:8d:fa:11:c3:c9:01:53:88:21:02:1d:
d7:16:9e:99:c7:23:97:fd:4f:33:77:60:0a:bc:00:
ac:3f:17:50:0e:b1:61:eb:74:ee:8a:9f:3d:0d:89:
01:4d:6e:90:e0:e7:ca:38:77:87:ec:c8:43:e0:73:
ea:a5:78:f8:51:47:24:6d:61:07:7c:2c:cb:59:56:
70:e2:6d:30:73:fb:46:db:93:2b:b6:94:b6:e2:b9:
b1:f3:5b:7f:b9:26:f5:2e:e5:fd:88:ea:e2:59:54:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:D7:30:20:9B:2D:30:38:B7:09:11:D4:41:FC:EA:30:BE:85:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9a5ae7be-89bc-3add-a1f4-ddf31ddbc717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:de:f8:7e:2d:f7:b7:80:e2:3f:28:76:e3:84:f9:96:2c:79:
71:e4:9b:b8:df:dc:2d:9a:71:e4:f3:99:a0:74:4e:1e:6c:7e:
c1:5d:7a:8b:5b:81:cc:e9:02:19:38:ec:6b:97:64:4b:82:1a:
e1:12:0a:b7:16:65:57:17:15:c9:f2:09:a1:2f:c9:e8:81:1c:
1d:6e:06:f0:aa:90:8d:fb:58:b6:cf:a4:cb:94:34:18:3a:4f:
d6:f5:42:ab:34:4d:4b:98:6a:bb:f3:b3:75:0a:57:55:f1:2f:
09:d9:20:54:3e:ca:c4:6a:89:23:f3:90:57:e2:76:ba:16:00:
13:c1:5c:30:2e:c8:74:0e:89:21:87:f2:cb:a4:74:b1:56:5d:
5b:f9:16:67:45:08:85:a8:01:0d:bc:b1:58:9e:ab:aa:ac:15:
58:96:cd:89:cb:1b:4a:e8:e0:e9:91:04:2f:18:7d:07:22:cd:
09:dd:32:c5:08:15:34:da:64:d9:c7:89:79:64:1b:1f:d2:dd:
59:f3:bb:17:bb:94:55:f5:39:15:4e:7c:2c:75:a9:3b:62:91:
65:b6:e4:cd:1b:72:e9:32:7c:20:bc:f3:7b:90:45:88:6e:81:
7b:86:8a:86:88:52:70:9c:24:97:44:4d:f6:1b:05:80:9e:d8:
25:a6:07:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org