Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c73b6f4a-1e4f-3066-b5d6-e8014b0274dd.roa
File: c73b6f4a-1e4f-3066-b5d6-e8014b0274dd.roa (raw, json)
Hash identifier: om6090pHh/3CS6eePF9OuDi8TtIHJJFDK9JWPOrkcWE=
Subject key identifier: 2D:AB:9F:10:9D:2E:52:8B:9A:33:27:0F:60:DC:AE:F0:1C:81:24:9D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A5AB54BD7CE5DC3D406F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c73b6f4a-1e4f-3066-b5d6-e8014b0274dd.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a5:ab:54:bd:7c:e5:dc:3d:40:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a9f07d6b-b6f5-4784-8160-07c55c0286a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:63:8d:ae:10:e2:1a:6d:9c:a6:27:69:81:
14:df:9f:16:05:91:e6:7c:d8:7a:1a:5e:47:01:06:
ae:e1:48:0a:71:ef:a6:5b:eb:bb:da:cc:12:ce:27:
24:a5:16:e6:aa:2a:37:2e:c2:b7:63:91:3b:6f:7e:
6e:c9:97:70:d9:ba:01:0e:8d:ef:3e:08:4d:22:0c:
b0:51:af:52:df:b9:81:a2:85:8e:81:d4:a6:37:3a:
ea:4b:3f:df:1e:18:c7:fb:ee:c7:22:a9:43:a5:e4:
e3:3d:75:f4:f6:24:e1:c3:27:19:ed:00:10:b3:0b:
f5:70:7e:f5:ed:1f:77:cb:d6:4f:f1:9c:dc:b3:48:
b2:ee:98:d9:f1:3c:4e:a0:2e:12:9a:15:ad:f1:39:
8e:43:9d:bc:3f:49:83:79:3c:8f:b5:98:e7:4f:4b:
b7:33:ac:5a:2a:3b:08:5f:39:22:58:cb:97:eb:ed:
db:71:24:5d:cc:0a:93:f2:47:41:d8:d2:0a:61:77:
89:db:4a:c6:7d:8b:52:07:91:7b:f0:12:b8:64:1c:
d0:c9:ab:75:63:ac:cc:7a:47:ed:55:4b:94:c3:e5:
88:92:14:5b:f2:ff:3d:09:77:94:37:68:20:a0:21:
06:65:6a:64:71:be:3f:da:1d:2e:26:20:22:2d:38:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:9F:10:9D:2E:52:8B:9A:33:27:0F:60:DC:AE:F0:1C:81:24:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c73b6f4a-1e4f-3066-b5d6-e8014b0274dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:4f:14:fa:57:3b:08:01:6d:f7:b7:fa:eb:e6:b3:c2:96:d4:
6f:a4:d2:7c:b4:48:52:b8:0d:44:f2:3c:4b:cf:da:24:a3:18:
d7:3b:26:4c:4b:8d:66:02:40:62:1d:c8:a5:b5:10:2d:38:48:
47:c5:b5:1a:59:dd:0c:85:64:b2:f4:0b:71:49:37:7d:0b:42:
15:d0:98:11:c7:2c:87:3c:21:10:23:4a:cb:77:2f:8e:e3:9a:
7c:d6:65:a0:9d:0c:9e:21:91:b7:ca:05:03:94:d7:29:bd:96:
c0:c2:f0:9d:76:c2:b7:16:f4:bf:6e:ea:99:6f:97:8f:37:4b:
e2:7f:a4:6e:2f:a6:81:39:6d:f3:56:bc:db:9f:15:52:e2:50:
8e:c1:80:2b:f4:b4:31:2c:21:2d:33:db:f8:14:6d:cf:96:18:
89:8a:ec:87:f7:4b:6c:a7:b9:c7:2e:9f:e8:9b:c8:d3:07:43:
22:d2:7b:3e:a6:28:79:a0:90:d8:7b:3a:39:b5:a3:f0:c5:2e:
fe:97:10:fc:b0:f7:3e:a0:28:17:d6:ce:7f:d8:27:08:9d:65:
96:3a:81:d0:c7:1c:64:a6:51:17:d7:89:20:a1:7a:05:dc:25:
b0:d1:61:b9:d3:0b:1a:58:74:5f:8d:a9:b5:aa:f1:94:c8:c3:
78:f8:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org