Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b82536c8-2dab-3092-a69a-d2bbf71a00aa.roa
File: b82536c8-2dab-3092-a69a-d2bbf71a00aa.roa (raw, json)
Hash identifier: Bv4jRvEsYFoK9cWPzLFtc2xl+7c8xZ1zGggB1LdP4KE=
Subject key identifier: C0:DE:8E:5C:A4:93:6B:8A:61:94:69:C9:71:90:B5:B2:4B:E4:DF:E8
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A887127B2E45920D84EE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b82536c8-2dab-3092-a69a-d2bbf71a00aa.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:87:12:7b:2e:45:92:0d:84:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=fb2c3ff6-bfa3-46da-b730-c28aaef1ccf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:f7:a6:92:ee:96:98:1e:1e:b7:f2:8f:8d:
54:c5:33:f4:7d:06:df:2c:23:80:e4:ee:85:77:86:
e2:34:67:f0:bc:27:03:8d:db:e2:bc:87:17:a6:e3:
8e:9e:4f:80:59:c5:73:6d:69:1d:29:89:95:cf:a6:
cb:6a:c1:d3:fa:ed:38:7a:7e:cf:f4:22:9c:fc:81:
bf:c8:3a:50:75:de:d6:08:89:3a:26:1f:c5:34:6d:
09:d6:12:06:fc:01:1b:29:5b:bc:31:49:25:0f:25:
44:0c:7b:3e:f8:93:0b:9f:c4:d1:13:e9:cc:50:c4:
39:54:70:c9:dd:a9:36:c4:c7:6e:fb:08:c5:cc:e7:
84:55:ff:6b:cf:20:9b:80:4d:d2:ef:58:59:ba:f4:
33:d1:26:b9:e6:3e:3e:dc:6e:94:49:19:fc:df:0c:
cf:64:be:32:c0:fe:3b:c4:8e:ed:77:d8:98:95:b2:
88:4f:b9:4f:25:0b:ad:4c:0e:42:e0:a6:32:94:76:
5a:fa:9f:47:fe:d6:9c:a2:cc:80:55:d1:b5:72:26:
e0:e6:d7:21:cb:6d:a4:08:f5:54:d6:7c:9c:93:53:
ed:c7:80:bc:c7:fa:85:a2:4b:ed:a3:19:fc:e0:ee:
e7:26:9d:b8:5e:24:8f:ab:db:11:ab:b3:c2:e0:d4:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DE:8E:5C:A4:93:6B:8A:61:94:69:C9:71:90:B5:B2:4B:E4:DF:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b82536c8-2dab-3092-a69a-d2bbf71a00aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:3b:96:67:a8:65:2f:f1:71:88:52:b7:28:04:c9:db:cd:cc:
03:2a:d9:3f:f8:09:fe:d9:62:2a:2b:48:8c:7a:74:f3:e9:5d:
04:17:f5:a7:4f:d2:8e:0f:e6:32:c2:ed:39:4d:8f:d0:44:9a:
84:c3:37:55:9e:8f:15:41:e3:36:45:5f:a4:a7:9e:c4:32:8c:
69:be:f0:5b:8d:ad:f8:ba:7c:10:74:9e:c1:45:ea:41:67:ce:
69:f6:b2:8e:9a:57:60:af:47:4b:9e:c9:e8:4c:65:b3:bf:d1:
1a:e7:b4:b0:9c:43:4c:fc:99:92:72:2f:94:3c:c8:d9:72:52:
44:d4:38:cc:1a:19:f6:f8:8a:e9:f6:54:e6:54:54:53:00:97:
5b:8c:39:7a:d4:57:27:de:55:98:74:38:65:7b:e6:85:34:81:
d2:2f:cb:95:34:dd:87:23:91:80:8e:a1:fb:c2:ff:1d:35:5a:
aa:fd:6d:4d:63:55:17:87:34:a7:9f:03:f1:dd:43:36:a3:fe:
ca:ce:65:74:81:93:f4:f2:99:38:39:e6:5a:ef:87:13:61:92:
11:42:78:ce:03:2f:db:ab:66:d6:ab:68:8a:c6:09:11:d9:97:
9c:c8:13:8e:bf:3b:59:42:a8:1c:ab:ec:18:86:ce:ac:32:ec:
5c:76:ee:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org