Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6de3912-5114-3a3e-a2d1-bfdb992f96c9.roa
File: b6de3912-5114-3a3e-a2d1-bfdb992f96c9.roa (raw, json)
Hash identifier: LWGM1F7WayS3UAB8eCBWIUS1QTs158Uan3IEssQGVO4=
Subject key identifier: DD:C4:44:C7:AC:6B:67:3D:58:E2:B3:CE:8F:1E:91:44:38:0D:F2:B2
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AAE98600C55C4D9394E692E00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6de3912-5114-3a3e-a2d1-bfdb992f96c9.roa
Signing time: Fri 23 Jul 2021 04:00:00 +0000
ROA not before: Fri 23 Jul 2021 04:00:00 +0000
ROA not after: Wed 25 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 104.133.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:ae:98:60:0c:55:c4:d9:39:4e:69:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 23 04:00:00 2021 GMT
Not After : Oct 25 04:00:00 2023 GMT
Subject: CN=27617aad-ba2c-4070-9c7c-5621270091ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:a1:96:2f:f5:78:6a:69:42:7c:74:b4:3d:
9d:4c:01:c1:58:8e:d1:40:5e:c4:e8:1f:54:67:55:
49:65:35:ff:6f:58:c7:34:1e:7b:9f:03:da:bf:f3:
e0:25:5a:2a:53:a9:dc:c2:6c:73:a7:a4:9f:d0:98:
f0:ac:e5:62:3c:2f:f0:36:99:89:66:5d:2a:17:4f:
cb:bb:c0:4f:b5:f1:55:30:a2:c5:2f:8e:3a:8c:b5:
48:11:34:07:f9:05:ae:bf:f5:d3:59:74:3d:5d:0e:
82:cc:91:60:82:92:78:03:c8:42:16:51:36:2c:03:
2b:5b:31:e5:d8:1c:bc:9d:34:36:8f:91:b3:8d:a6:
89:bf:fb:4a:8e:36:75:2f:cf:ae:06:0c:39:29:5d:
3e:da:d4:e9:2c:7d:93:1c:a1:12:5c:d4:0d:05:99:
3c:30:07:c2:6e:30:b6:d9:ed:6c:67:23:de:14:53:
d6:46:3e:db:d2:d5:70:d6:f1:3e:11:5a:0f:9b:9c:
47:74:e1:6e:3e:39:59:e6:4b:fb:95:91:9c:c9:71:
35:b4:6f:3e:01:8b:98:60:6b:33:52:0b:b8:ed:37:
0a:8a:e5:64:98:92:ed:2d:19:52:55:c1:51:e4:67:
24:f7:72:ec:e3:4b:bd:2c:6f:55:cd:3e:26:87:67:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:44:C7:AC:6B:67:3D:58:E2:B3:CE:8F:1E:91:44:38:0D:F2:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6de3912-5114-3a3e-a2d1-bfdb992f96c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:36:ea:78:78:01:9b:28:24:5c:92:52:16:f2:e2:37:e0:f1:
f5:3e:b4:93:d0:a4:c5:08:22:06:6a:56:5d:4d:8d:ef:eb:75:
96:c1:c9:67:0c:3a:e7:8b:01:bf:f9:88:de:24:8f:5b:a8:57:
a7:43:f8:06:16:af:86:70:c4:01:1b:8f:b5:99:02:6a:cc:7d:
5d:6e:c2:a0:65:86:c4:d2:f9:25:70:d9:41:2a:c3:74:13:7f:
47:16:0f:5d:74:17:51:06:58:09:e3:08:72:af:43:26:e2:7a:
0b:65:90:ce:e2:5c:8e:7b:3d:05:54:5d:7d:73:39:21:2f:43:
b8:f1:1d:7b:6d:a7:06:50:69:ec:8a:d7:b4:e8:cc:66:a1:85:
e5:5e:10:22:93:b6:d8:af:94:0a:64:f5:bc:80:00:f0:59:93:
b9:bc:fd:59:0d:e8:ee:83:bd:36:cd:7f:ae:8a:5e:1a:bb:49:
81:c3:98:52:56:d4:b2:a8:2e:5e:ed:59:e5:63:41:ea:c7:a6:
b6:6d:8b:7f:0b:4d:3d:6b:36:79:f8:90:ad:70:55:20:80:07:
06:1a:b3:11:5e:95:00:10:27:d1:ad:1b:c4:39:ca:5f:0b:4e:
e3:6e:c8:ce:c7:4a:ee:20:52:ae:af:4f:31:43:06:0d:fe:a3:
05:6f:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 04:07:51 2023 by rpki-client on console-fra.rpki-client.org