Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b3d4606b-49c6-344e-839f-76e9154219ba.roa
File: b3d4606b-49c6-344e-839f-76e9154219ba.roa (raw, json)
Hash identifier: 9E76jtYd6etDYrfCvmiwo3XtYCVXKPSLfc327Hllk9I=
Subject key identifier: 51:F1:40:CF:E9:B4:62:13:E7:37:68:6A:91:78:9A:24:93:68:E5:3F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BA39BED6651DEB151822C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b3d4606b-49c6-344e-839f-76e9154219ba.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:39:be:d6:65:1d:eb:15:18:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f0ddc33b-e33a-4c76-a6c3-3ec8e572f422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:b5:62:e5:57:95:e5:a7:34:50:c9:00:4a:
10:12:f2:c5:6f:f0:66:22:6a:7e:8b:b3:20:2c:e7:
07:b3:3e:0a:4d:6b:42:a8:2b:4b:ae:f4:66:46:7f:
e2:3d:7c:01:f9:3f:0a:1b:0f:bb:cb:67:e7:25:d1:
1d:cc:03:9e:21:37:1a:fe:11:c0:41:ec:83:56:69:
05:78:52:12:8b:b8:f6:07:42:97:f5:eb:9e:78:e2:
1a:a5:09:ca:cb:c4:fb:71:61:41:bb:15:69:30:01:
09:d5:40:8a:99:2d:ad:0c:7f:f9:64:06:af:e2:74:
3e:f7:dd:94:c9:ab:91:7f:b8:51:44:9e:c4:16:69:
b6:ec:0f:b8:91:3f:1d:6c:f3:ff:c2:bd:76:82:71:
44:96:1f:7f:cf:b1:d8:e8:a2:9c:12:ab:ab:44:66:
a4:08:03:13:4a:b5:01:1a:98:f8:23:42:70:3e:4b:
fe:aa:3a:fe:76:79:1f:81:7a:3f:85:07:30:c1:28:
c5:ee:09:7c:68:9b:23:8a:72:5d:40:97:c2:05:08:
cf:6b:62:7a:67:80:f0:48:01:e2:8c:59:81:cd:d3:
69:22:a4:df:aa:84:f5:e4:15:b7:aa:c7:00:c9:23:
85:d5:8b:b7:bc:cc:da:04:61:67:dc:23:87:cd:15:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F1:40:CF:E9:B4:62:13:E7:37:68:6A:91:78:9A:24:93:68:E5:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b3d4606b-49c6-344e-839f-76e9154219ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:fe:87:c6:38:32:97:de:12:fa:bb:6f:b0:c6:5d:6c:79:15:
38:1a:cf:8b:51:e8:1f:8d:4f:ba:2a:8d:8f:b8:c9:8a:f7:6b:
c2:ec:1e:f0:46:f3:e4:24:35:c6:65:b5:4c:e4:0a:c9:7a:a6:
e4:34:ae:93:3e:15:79:3a:f7:03:51:47:f3:e1:c4:8e:fd:22:
4a:d6:01:9b:4b:26:14:d7:f0:83:29:a1:0f:89:7c:17:52:3e:
bb:ad:e4:83:01:c0:9d:eb:12:0b:b4:5f:d0:f3:5d:4e:ca:2c:
d8:26:92:8d:3e:3b:75:cf:fb:61:0a:81:be:29:f6:cf:12:c0:
29:59:e1:da:13:1b:e2:22:bf:00:82:8a:aa:3e:a1:65:06:8e:
4c:60:6b:f1:68:82:92:1e:78:22:1f:ec:c5:db:20:11:e3:b2:
a3:80:a1:eb:16:40:a7:05:f8:05:d8:13:f7:d0:2d:22:6a:e6:
90:3a:c6:e0:b5:40:5d:b7:99:76:33:97:07:6f:03:51:f4:c7:
e6:68:df:98:8f:ec:eb:5b:f1:d1:30:e8:90:af:27:83:5a:da:
0a:45:55:0b:e0:b0:c5:29:5a:48:09:50:c2:a9:b4:52:85:bb:
74:80:02:f4:7a:8b:e4:fa:5b:08:0e:2d:c3:43:db:ef:3b:90:
9e:14:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org