Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca1c7f9c-64bf-32e1-8310-1434867cfe4a.roa
File: ca1c7f9c-64bf-32e1-8310-1434867cfe4a.roa (raw, json)
Hash identifier: X26K+4nJgT52Sq4m/LGoPdThpVixboAf11F7cH9gYuA=
Subject key identifier: 6D:79:E1:52:86:F9:2F:E4:20:C3:D4:C5:94:33:BA:D0:AA:D3:D0:22
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B0A7FFC10CC5F7479A8D40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca1c7f9c-64bf-32e1-8310-1434867cfe4a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b0:a7:ff:c1:0c:c5:f7:47:9a:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a84f8264-133f-46e9-b1ed-f1c6c690d551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:a1:52:a7:25:da:8e:99:e5:69:ff:67:75:
b0:7f:7f:bb:1d:a1:71:06:eb:04:86:ab:7f:9c:19:
d7:93:16:64:34:32:64:80:1d:5e:ed:a1:c5:f0:45:
10:9f:01:b4:e7:3d:ae:b0:9b:b9:c5:07:6b:40:50:
0f:c0:45:fd:d0:3b:c7:f4:34:ad:5f:15:7f:ed:b1:
bd:15:66:37:b9:5f:c6:4e:37:58:c7:b4:71:76:02:
c8:ec:3a:85:1c:38:96:88:7a:f4:a7:9c:42:d2:87:
ff:b4:d6:16:65:9c:80:b0:bf:76:ef:45:c5:a6:d3:
2f:c6:d7:53:73:ed:03:37:c5:d6:ee:8a:37:e0:72:
3e:a7:38:63:5b:ea:db:25:cf:d9:30:ad:19:ef:08:
ac:22:dd:06:b6:3f:e5:fa:e8:e2:87:63:c8:0e:ab:
4c:37:a0:69:99:84:ca:37:a8:97:85:5c:67:aa:b5:
d7:d1:15:7e:a6:27:f2:09:37:ee:20:87:a2:85:19:
76:09:ad:c7:a9:8f:46:f5:d3:33:5b:6d:1b:95:d4:
3f:84:20:9f:08:6b:da:da:df:ba:2d:29:44:11:1b:
04:11:87:28:4d:e1:1c:47:ac:3b:7f:28:86:0f:46:
46:65:90:fd:ec:7d:f4:9e:e1:8e:7b:ed:80:20:12:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:E1:52:86:F9:2F:E4:20:C3:D4:C5:94:33:BA:D0:AA:D3:D0:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca1c7f9c-64bf-32e1-8310-1434867cfe4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:ac:d4:10:ae:82:8d:c0:e8:f6:92:21:6d:d9:bb:2a:a3:94:
38:f0:05:ee:ce:98:b6:08:08:60:64:aa:94:53:3d:22:d6:b8:
67:67:94:73:3c:01:90:74:98:62:2b:b9:54:d5:ca:c6:de:48:
4c:ca:36:52:ac:22:62:24:1b:71:7c:e3:08:a1:da:3a:fb:ff:
63:af:d8:ed:35:1f:43:3a:4e:6c:c7:78:db:0d:29:5c:54:02:
fd:3a:20:93:8a:e6:de:06:10:56:61:0b:0d:0d:cf:41:93:7c:
68:58:f9:71:04:1c:11:2b:f9:58:6e:37:68:c4:89:57:73:e2:
15:51:a7:f7:ea:07:03:9e:fd:97:5f:b6:74:5e:72:23:65:a6:
ef:64:67:c5:a7:5b:7f:29:a4:23:82:7c:80:a2:46:f3:76:a4:
c9:0d:01:be:ee:cb:74:b3:c5:78:17:28:4c:64:c6:24:b7:31:
d4:83:54:6b:48:a1:94:c9:0b:4b:8a:c6:71:2e:87:e3:26:cb:
d6:02:87:3c:3d:e5:c5:27:2c:cc:ed:34:ba:43:13:d4:ed:4d:
fd:6a:bf:90:84:f5:56:da:38:c0:08:6a:af:55:1b:99:b2:46:
96:ad:79:6f:de:9c:bd:a7:c8:64:7f:d3:7b:e3:89:cf:ff:37:
27:7c:f2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:13 2023 by rpki-client on console-ams.rpki-client.org