Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1bc6d12-5cc6-3ce2-b60a-3125ef72dce5.roa
File: b1bc6d12-5cc6-3ce2-b60a-3125ef72dce5.roa (raw, json)
Hash identifier: AVOBLQe7GjM1NxQG6FCb8tF419LRSoCkdXerEmV3d5I=
Subject key identifier: D7:9A:F8:AE:77:8F:CB:40:AE:06:8C:39:3A:5B:F3:0E:5C:77:7D:66
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A4CC82A4EB2A855A5C1970
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1bc6d12-5cc6-3ce2-b60a-3125ef72dce5.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a4:cc:82:a4:eb:2a:85:5a:5c:19:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=ddb5f2c9-94f2-4b1b-86fe-b123a315c983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:02:40:10:8c:ee:8a:fc:0d:7f:5b:71:81:
34:11:d8:7f:19:8c:69:6e:ee:14:47:94:f4:ca:22:
5a:5e:d9:21:ea:8b:7b:50:12:c7:d1:a4:29:ac:5d:
38:dd:e5:4a:00:5a:c3:97:76:48:5a:55:af:39:cf:
72:5c:c1:7f:4b:ca:5a:6e:71:ea:44:71:50:d8:e0:
2c:7b:2f:e5:6d:a5:3d:7c:de:76:2d:82:26:c5:bb:
48:fe:69:29:9a:92:3c:3b:c3:56:a3:71:7f:09:a3:
1d:ae:b2:e0:5f:32:b6:1c:96:89:02:4d:18:e6:21:
50:da:8b:b0:8e:d3:aa:69:4f:4c:fc:04:d0:b3:e4:
2b:a9:fc:af:00:84:72:47:b9:ad:5e:d4:83:41:35:
37:9f:98:47:75:3a:5f:7e:bf:a6:51:19:40:e5:03:
f5:16:a4:ac:57:5f:2e:5a:ce:70:f4:0e:31:ba:56:
70:e9:9a:84:a1:6c:84:bc:19:33:99:3d:0e:67:42:
42:4c:ef:03:4f:10:5c:93:30:a9:97:89:67:35:14:
fa:3a:3c:8e:95:43:76:8f:d6:71:ba:ac:a2:61:48:
f2:56:f8:59:62:40:ea:a1:74:6d:b1:d2:4a:15:55:
0d:a9:38:89:f9:3b:a5:7b:64:0b:09:b2:af:52:23:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9A:F8:AE:77:8F:CB:40:AE:06:8C:39:3A:5B:F3:0E:5C:77:7D:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1bc6d12-5cc6-3ce2-b60a-3125ef72dce5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:9e:6f:18:e0:8c:cd:de:b5:b8:f7:1d:75:72:3e:1a:80:6e:
72:2f:c3:14:c2:89:08:90:44:a7:9c:cf:0e:89:54:48:15:a6:
0c:77:47:2f:64:6c:27:22:44:f1:e9:fc:09:03:fd:eb:4f:54:
0a:4d:fa:5e:2b:c3:58:35:d7:38:45:0d:88:c8:a1:29:a8:2c:
fa:ea:bd:b2:ae:b7:21:8e:04:86:5d:7f:2c:bd:db:dd:0b:36:
4e:09:0d:a9:19:8b:5c:4c:88:5b:c1:51:bd:f1:1d:37:82:1d:
80:a1:2d:0c:d5:78:d5:8e:88:19:87:55:f7:d1:cb:07:1b:2c:
6a:a2:01:a4:41:82:5c:6b:7d:33:18:88:c5:f8:ba:de:93:71:
54:ec:07:5a:37:0d:06:72:1f:62:07:5d:bd:db:d3:bc:7b:30:
bb:b5:ad:09:a9:ff:be:fa:46:0b:04:29:a5:d6:ec:a0:ae:2c:
dc:29:60:7c:25:92:dd:92:f5:77:8b:a8:8f:47:8f:4e:8c:e9:
22:c8:e2:9b:8a:00:10:8f:f5:a6:e2:09:28:15:9c:fc:aa:a9:
64:63:f1:94:54:75:0f:81:cb:dd:59:20:02:f7:ef:18:15:ac:
5b:ce:26:5e:c0:72:38:76:ef:38:b6:6a:61:4e:c3:4a:98:35:
88:44:9a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org