Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a88c9855-2641-3693-8bfc-b5d9f1230eba.roa
File: a88c9855-2641-3693-8bfc-b5d9f1230eba.roa (raw, json)
Hash identifier: +isZXuJISqty1gHLts0LKaiqllk2JYJMAQWUc/ZS99c=
Subject key identifier: 48:FF:67:F3:7C:FC:6B:EC:8D:D5:A3:34:07:7A:88:60:14:73:A3:65
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B519D437C5E26F2AF0D060
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a88c9855-2641-3693-8bfc-b5d9f1230eba.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:19:d4:37:c5:e2:6f:2a:f0:d0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=624b53de-1609-444c-8e8f-d4d372676bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:de:7b:4b:95:ab:36:31:67:91:46:7b:21:
1c:0c:3f:18:a0:23:b7:9b:64:8e:18:bf:b8:27:59:
35:a8:e2:19:10:32:ae:f9:8b:84:50:b7:27:ff:2f:
51:5d:c1:cf:d7:be:ff:7c:4f:b0:81:2f:5a:4a:01:
6c:a0:80:9b:70:0a:6a:22:09:63:02:75:a8:6d:82:
60:32:eb:47:57:f3:d9:b4:1d:84:26:cc:7a:8c:92:
84:f2:e3:74:0e:9c:84:eb:3d:86:57:bc:c4:20:41:
ff:ae:48:a3:16:cf:3f:7e:cb:45:aa:f3:cd:ff:59:
d3:5c:1f:1f:b4:e1:6e:f8:a8:3a:d5:21:75:94:b0:
d0:74:0b:9b:cc:ec:08:20:62:8e:07:d2:e2:46:d6:
ed:e1:28:90:4c:87:95:71:f7:63:b3:57:87:e7:58:
18:0e:ed:5c:7e:36:46:9d:a9:ce:f5:c2:71:9c:cd:
91:ce:c7:8f:b3:a9:7c:b5:4f:b9:f9:b3:48:79:3d:
dc:a0:31:57:9e:2d:14:d1:38:c0:7d:ab:c6:a7:95:
49:e4:a5:20:36:70:90:64:f0:77:9e:3a:8f:63:32:
c0:d2:f4:25:ee:39:a6:2e:32:c0:db:e8:63:64:62:
0e:8f:04:8e:b3:46:e4:9b:88:18:e2:0a:0d:50:cb:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:67:F3:7C:FC:6B:EC:8D:D5:A3:34:07:7A:88:60:14:73:A3:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a88c9855-2641-3693-8bfc-b5d9f1230eba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:24:16:d6:cd:ab:d2:4e:d9:be:62:d8:e6:56:c8:1d:a8:65:
68:ea:5f:e6:cb:33:61:ec:16:ce:af:5f:f4:b6:bb:31:32:d3:
df:61:5d:23:0c:a7:03:b6:68:39:4f:d1:f9:ae:21:54:dc:0f:
8e:4c:19:23:9d:35:dd:f2:9a:d6:79:76:12:45:e3:22:b1:75:
41:cd:a3:f0:c2:f4:f6:78:e3:34:e4:66:92:5d:63:d3:69:5a:
37:71:aa:81:b9:72:50:d1:3c:3e:e7:14:c8:00:7b:d1:97:4f:
73:0c:85:c4:74:28:f3:b5:b0:7a:47:13:d9:b7:ff:5e:7e:d4:
38:9b:ed:6e:74:83:e1:d8:ff:03:c1:5f:49:0a:dd:df:03:71:
f8:19:25:92:ae:5c:7e:93:b0:6d:c8:92:f1:23:c1:ba:8c:83:
e6:de:2b:b5:66:44:38:4a:07:c1:63:fa:ef:14:09:43:90:a8:
c6:82:bf:46:7b:d9:b4:97:73:46:0a:cf:5b:78:ba:5c:4a:fa:
86:26:4f:5d:9e:15:fc:61:31:b2:ce:40:cb:9f:1e:e6:ed:cf:
4c:76:16:b2:34:9c:39:30:d3:ac:86:33:d3:7f:2d:31:14:e8:
2c:3e:e3:22:28:9e:e2:11:7c:2b:b0:a3:8b:3a:e6:0f:2d:bc:
bc:42:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org