Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a7c6e524-3e34-37ae-8939-d69a73a35802.roa
File: a7c6e524-3e34-37ae-8939-d69a73a35802.roa (raw, json)
Hash identifier: V7Lu02K1rwBje31FoRq8leG0tVn47eiEwfZD5rzjEho=
Subject key identifier: C9:CA:69:A1:A8:B9:22:F2:DD:51:67:85:7A:C0:CA:AE:61:7B:1C:43
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA79F5AE4BD3A977000585200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a7c6e524-3e34-37ae-8939-d69a73a35802.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9f:5a:e4:bd:3a:97:70:00:58:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=df524296-1318-4c01-827a-4d93d18bdc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:f6:08:26:52:b0:9a:41:aa:de:ba:4b:5c:
3a:7d:4d:5f:27:1b:7e:33:1e:55:7e:50:2b:99:fa:
f3:d4:a4:1f:f9:d7:96:b7:28:b9:48:4c:dd:b3:01:
59:74:2e:a8:34:bf:12:23:b3:cb:40:b7:1c:9a:a3:
dc:ee:fd:84:f3:be:e5:76:f7:11:28:36:52:62:e1:
a3:fc:7f:20:80:59:65:ca:83:c3:2f:c1:49:a5:25:
ad:2a:07:68:09:26:65:a9:50:11:c3:d7:0c:a5:38:
9f:9e:44:74:71:5a:41:8e:49:e0:ce:49:d3:7f:4b:
0a:6f:bc:47:58:9b:e1:ac:cd:8e:c2:27:43:cc:98:
63:f3:4d:68:7c:49:8c:c2:83:68:63:e3:98:df:0a:
c3:19:71:d2:8d:1a:51:b0:68:c8:61:e0:75:f1:00:
ac:47:6b:15:4b:33:1a:a0:eb:1c:9a:49:a2:e4:9f:
5a:b4:7f:2f:ca:62:70:86:b1:24:bb:ae:e6:32:31:
63:93:ac:ca:7d:b3:94:55:0c:21:60:3a:5d:f0:c9:
af:6b:47:e9:22:b1:bd:6d:19:97:67:be:44:a1:62:
91:af:91:ee:b9:5b:10:21:5c:84:d7:e1:50:3f:57:
2f:35:8b:d8:4e:3a:f8:e8:2e:70:c9:9c:48:48:b6:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:69:A1:A8:B9:22:F2:DD:51:67:85:7A:C0:CA:AE:61:7B:1C:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a7c6e524-3e34-37ae-8939-d69a73a35802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:c0:b5:34:b2:89:6e:d2:14:e6:cf:63:80:86:49:92:ad:4c:
82:8d:29:dc:bb:87:76:b9:f2:86:a1:7b:62:4d:72:30:be:36:
ca:70:81:7d:f7:2c:af:5d:c8:50:40:48:20:d1:ab:28:f8:30:
18:b3:36:7a:cf:67:a3:33:8a:07:0f:5b:a1:0e:ed:d7:22:c9:
8a:fb:ae:55:01:3d:cd:05:6f:69:5a:b4:35:bb:43:79:e3:aa:
e2:4f:6b:a6:3c:9a:14:38:a0:10:95:8f:0b:dd:23:20:c9:fd:
40:a3:cd:d4:68:be:bd:f7:01:b1:78:14:15:19:70:22:09:96:
9e:49:6c:f1:67:4a:92:0e:30:6c:0d:85:e5:52:2e:0f:d4:12:
8c:f3:e5:fa:9a:95:5a:e5:e9:20:fb:83:ec:38:9e:4e:35:73:
a4:b5:09:9f:5d:4a:82:aa:34:58:e1:28:72:17:fe:b7:fc:ad:
39:f2:f5:b8:bc:0d:a0:6b:d4:df:ad:db:e0:a9:61:b5:06:23:
47:b6:09:c8:46:48:2a:ee:b2:6d:ba:6d:96:49:1b:ba:b7:f6:
77:2a:c4:a0:dd:4c:8a:dd:2a:f4:e3:8a:6e:a3:b2:58:61:83:
89:ae:f5:57:30:81:f6:6f:27:d7:41:f3:36:86:ee:76:56:a9:
f3:ac:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org