Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a465589d-76e1-3b36-9903-0b3a08a80f7e.roa
File: a465589d-76e1-3b36-9903-0b3a08a80f7e.roa (raw, json)
Hash identifier: yoG2YnhgSb5BoYkqxRwVuCGEaqpUYWahEHQeO5hg3uY=
Subject key identifier: FF:08:7B:00:16:03:DB:A9:B7:D4:23:32:99:89:7A:6A:2D:64:B1:93
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B7A9F1E65F8DB6E4D65B30
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a465589d-76e1-3b36-9903-0b3a08a80f7e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b7:a9:f1:e6:5f:8d:b6:e4:d6:5b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=19fffbd7-6e7b-4f1c-bb2a-fefb347fb1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:39:bf:a4:90:54:39:be:27:8e:df:34:d6:
03:c9:91:e7:0f:59:43:cd:9f:9c:ef:82:1f:00:db:
8e:6d:fc:69:fd:99:63:01:3e:ae:82:f4:e6:4e:9f:
ff:42:8d:25:97:51:2a:40:3d:ea:d6:32:00:7f:c2:
1a:58:3d:bf:0d:71:33:aa:2f:ab:e8:99:fb:55:bc:
3e:0f:44:62:e2:34:6d:f4:fc:c6:f4:15:73:d7:23:
4e:49:b9:13:22:6a:98:d1:58:34:09:b1:cb:29:e6:
cf:6c:75:a0:42:dd:82:d4:07:a4:5d:dc:21:94:50:
38:04:18:e0:f1:f4:a2:af:78:d9:2a:3a:d9:52:89:
12:42:68:88:bf:28:05:25:1a:0b:9c:dc:12:50:55:
3c:b1:73:5a:e3:4f:50:f1:b6:f6:c0:62:f4:da:5e:
e2:5e:07:5a:70:f8:0e:c0:5a:22:02:65:2c:a7:1f:
e2:51:4b:d9:b4:b0:56:35:8c:36:d8:28:0e:de:1f:
85:8e:e2:3d:43:bb:b9:96:a2:5a:86:e3:e2:33:de:
d0:6f:98:8c:34:8c:d2:f5:8e:9d:ad:18:99:ba:d2:
85:7c:eb:9b:f0:a2:69:5f:f1:1a:a4:bc:66:2e:40:
8b:e6:f7:f9:30:0a:90:6e:b7:7f:46:06:a9:e9:ec:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:7B:00:16:03:DB:A9:B7:D4:23:32:99:89:7A:6A:2D:64:B1:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a465589d-76e1-3b36-9903-0b3a08a80f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:ae:d9:68:58:a5:e6:b4:a8:f6:0b:af:1f:b2:79:1b:94:0d:
4e:b1:35:a1:3f:55:d8:23:e9:b2:d7:20:20:22:f0:0b:c4:df:
ba:c6:8b:ca:07:d7:e8:77:cd:65:3b:aa:d2:40:0c:50:78:67:
4e:e8:b7:a4:e5:7b:d2:8f:42:46:b7:34:2b:5b:04:c5:88:9d:
4b:95:65:ba:64:55:20:53:b4:d6:3f:d3:17:6b:98:69:08:e6:
8d:9b:60:a9:c6:25:04:b5:8d:70:9f:12:0d:66:1e:1f:5e:2d:
8a:37:08:e7:d6:c9:31:f3:87:bb:83:cb:dd:34:85:3b:0c:d6:
31:6c:c6:e3:26:16:84:1c:a7:fb:37:57:24:e4:48:fe:7c:3e:
2d:18:be:69:77:0f:7b:ca:b3:81:51:3b:47:d0:62:f8:4e:4b:
aa:d7:6a:a2:39:69:5f:f9:b6:15:dd:1b:ba:1f:f7:db:5a:96:
10:08:46:a7:18:82:78:8b:cc:d2:16:df:ab:02:3c:2a:3a:bd:
86:d5:50:86:04:13:ce:6b:5f:46:fc:fe:3a:b3:e3:31:3a:af:
bf:a9:90:90:7a:4f:81:c0:c1:35:2b:f6:2d:79:ef:7b:16:d3:
2b:d7:4d:cc:68:6f:48:75:c4:21:78:48:76:b4:92:dc:89:60:
6f:c1:bd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:22 2025 by rpki-client