Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/af6dca9b-7179-3b49-9bb9-8c6f6f87d088.roa
File: af6dca9b-7179-3b49-9bb9-8c6f6f87d088.roa (raw, json)
Hash identifier: h60AVePxp6zhVAkGdHbIJZnnskfKeleA48v/bqWcMy0=
Subject key identifier: 44:FE:AD:04:C8:A3:47:D6:26:97:BC:03:E0:40:5A:38:44:7A:22:50
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B9E71818281BA1CE28B500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/af6dca9b-7179-3b49-9bb9-8c6f6f87d088.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b9:e7:18:18:28:1b:a1:ce:28:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c5eae584-f323-4107-a678-cb9fccc39a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:4c:b0:3c:06:d6:6c:43:6d:5b:2a:09:81:
d1:09:2e:8a:fb:e3:38:c3:ba:66:fe:77:69:1a:a6:
d2:2b:5d:a9:23:e4:9c:e5:2c:83:88:1a:58:1f:cc:
43:2d:08:69:2e:2b:44:d1:1c:ef:52:22:e6:f4:40:
a9:81:06:22:8b:12:65:7f:25:14:7e:c6:3f:77:01:
fd:73:ae:3e:7d:a8:df:bf:60:fc:2b:81:72:9c:76:
35:80:84:3c:85:c8:d9:9e:c7:ee:6e:fc:18:02:51:
75:1c:84:bf:1f:b4:bb:73:c9:32:ea:b8:6c:56:db:
a3:c6:ee:e9:66:a7:f3:19:8f:71:df:d6:69:43:a9:
74:59:e8:e8:92:f2:9d:76:4d:51:e7:f2:82:a2:1d:
0a:27:cb:2e:d1:35:2f:c0:5d:bc:cc:90:f4:b5:11:
8d:c9:58:bf:11:eb:de:37:7e:20:88:af:80:a7:01:
ba:86:fe:9b:ab:ea:9a:31:b4:55:83:56:9c:df:33:
92:11:b8:f4:36:86:f2:82:b3:ff:b4:a4:35:fe:28:
9e:69:4e:36:66:1f:e3:20:fb:16:1f:9c:3c:e2:dd:
2c:6a:8d:b4:e7:01:2b:d4:94:5c:87:29:ca:76:a8:
ad:54:05:a1:6f:fa:ad:e0:3c:46:08:c2:92:da:aa:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:AD:04:C8:A3:47:D6:26:97:BC:03:E0:40:5A:38:44:7A:22:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/af6dca9b-7179-3b49-9bb9-8c6f6f87d088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:56:04:97:c0:25:bf:5c:e0:ed:22:26:69:93:cb:d2:1a:1d:
f1:40:7d:69:de:d9:97:b9:08:1f:21:af:7f:5c:f9:67:f0:46:
5e:c7:9a:3a:f4:d1:a6:11:50:4f:d5:e2:31:a7:e5:b2:16:e7:
28:90:d9:db:d7:cd:5e:1a:53:a1:46:a8:70:bb:06:3c:15:70:
de:4a:6c:3b:18:8b:a5:6e:f2:59:44:6a:18:c4:df:4c:c5:0d:
f5:21:32:99:6e:8e:a4:e9:a7:f1:21:63:14:d6:9e:60:56:2b:
60:d0:1f:4c:fc:0b:d3:d2:9e:70:3e:b0:18:e5:24:91:1f:ce:
8e:72:a8:23:79:73:ff:9d:a3:a9:75:68:c0:78:4e:90:ea:3e:
09:dc:56:7a:67:9f:d1:3c:32:0a:dd:38:68:4d:c6:0e:3f:f4:
a1:64:87:c1:29:cf:52:d1:df:cf:f5:fe:59:31:5d:32:5c:51:
0f:d5:12:b7:cf:fb:84:bd:8f:d2:0d:83:3f:36:eb:9a:ca:6c:
cc:71:ac:e5:86:c7:5d:c3:b0:6c:4a:ea:b8:29:c4:3c:d1:05:
63:50:85:27:73:7a:b1:6d:e2:09:51:dc:60:79:f7:51:4f:19:
bf:c2:9f:00:9a:ab:ea:e6:4e:84:02:a9:c8:16:dd:9a:df:9c:
cb:7a:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org