Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/affabebd-fed9-3046-8400-a4fd72eb6d46.roa
File: affabebd-fed9-3046-8400-a4fd72eb6d46.roa (raw, json)
Hash identifier: 3y73EPrD5ZKuC+qPk5gDjJzw+EzyMr/NhioYQ8/EkCM=
Subject key identifier: 81:56:66:62:E0:95:3B:AF:32:0E:2A:B0:BC:BA:2D:8F:AE:E2:BC:5D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7AFDC5F5256D34A2B1D7E40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/affabebd-fed9-3046-8400-a4fd72eb6d46.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:af:dc:5f:52:56:d3:4a:2b:1d:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1c113c1a-e273-41fd-bff5-9966adf9fefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:f2:9f:e8:13:be:32:82:08:33:8e:8b:6f:
a4:50:f2:48:9b:43:86:7e:6b:6a:f6:16:5c:78:b7:
62:6f:ed:6c:cb:f0:d4:68:45:05:14:8d:77:81:3b:
35:1f:92:bf:c7:39:39:54:9a:cb:4a:a6:35:a1:91:
58:9d:40:81:11:5b:08:75:a4:97:2f:34:24:e4:15:
b7:15:fa:45:8c:da:d5:98:be:ce:28:4e:d7:3c:6e:
23:ca:f2:5b:e4:b4:7c:b1:8f:50:14:b0:94:94:8e:
97:fa:dc:19:68:16:b5:56:a7:7d:fc:28:24:22:42:
ff:5d:09:43:4a:65:30:0c:3b:0b:18:84:5f:08:50:
10:fb:ae:de:dc:66:c3:07:8a:b8:a8:bf:3a:c1:fa:
cf:00:92:6d:0b:ed:6f:fa:cf:f6:5f:07:31:7f:1f:
06:6a:84:05:70:86:e0:a4:da:99:75:c2:ec:94:fb:
b4:03:7c:83:90:79:17:75:3d:4e:07:24:59:fd:e3:
c9:3d:ac:24:ba:c0:53:ca:a1:0d:ed:fd:c4:29:1b:
03:61:96:66:05:f9:60:81:cf:73:14:e1:9f:04:2f:
28:4e:b0:cc:b1:5e:c5:10:1b:db:06:d3:fd:5b:9d:
3e:79:7a:76:5b:25:d7:2e:92:aa:d5:96:bf:89:50:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:56:66:62:E0:95:3B:AF:32:0E:2A:B0:BC:BA:2D:8F:AE:E2:BC:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/affabebd-fed9-3046-8400-a4fd72eb6d46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:e2:ad:6c:1a:53:c1:1d:df:7c:09:93:5c:11:7b:79:9c:00:
35:2c:a9:03:37:d3:31:fa:35:d5:77:f6:50:0e:af:56:86:bf:
b6:de:9a:9e:f9:7c:09:f2:22:d0:a0:05:11:6c:a9:7b:d9:3b:
9c:01:fa:90:b6:b6:c9:a4:20:6c:74:4e:fb:65:63:be:80:5f:
00:66:2e:10:bf:7e:25:c0:02:48:d5:15:97:30:9e:97:9d:0c:
af:bd:99:cc:47:b0:c7:08:ca:02:13:46:9c:c1:d9:f9:e5:fe:
9c:46:14:2d:e9:3e:16:6d:a2:77:00:0e:0e:d8:df:1c:e8:c0:
74:87:74:80:4c:84:c2:ae:6a:6e:af:14:9f:8c:97:27:2c:c6:
d2:25:b1:d5:b1:9b:26:f5:6f:40:b8:52:8e:c4:a1:02:f6:73:
bd:8c:e8:81:ae:18:cd:9c:2e:bc:fa:15:2c:a0:02:10:79:8b:
d1:0e:67:85:be:57:65:ea:ec:72:41:8a:a2:fc:78:56:fd:46:
bd:70:79:10:f3:54:2c:f2:4a:f6:2f:d8:9d:ca:3f:ea:08:3c:
90:94:b9:c2:29:8e:53:b6:5c:4d:11:c8:24:35:5a:65:ab:ea:
85:9a:85:60:94:d7:f0:04:76:fc:9d:ea:cd:35:70:15:01:f9:
d3:d1:48:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org