Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ccea0d88-538a-3e10-82d8-a8590810a511.roa
File: ccea0d88-538a-3e10-82d8-a8590810a511.roa (raw, json)
Hash identifier: Y6WU7cDYzzgQYESnlvG4uYkO9e53NAPc0DevGKQN/H8=
Subject key identifier: A9:88:DE:4B:F6:D8:A5:CA:0D:4F:7E:3A:26:89:6C:27:8D:7F:63:9F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BDDAF0C81708C227F96500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ccea0d88-538a-3e10-82d8-a8590810a511.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:da:f0:c8:17:08:c2:27:f9:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8d39caad-d62e-4346-897b-3282d269e00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:45:20:3d:81:b3:51:39:c6:89:eb:39:77:
f0:73:2c:2f:bd:d4:b7:e8:93:56:e6:aa:0d:c8:4b:
70:87:ca:2c:7d:46:26:8d:62:01:7e:19:48:cd:e2:
42:25:15:d5:f3:e7:cf:86:8b:84:02:5f:30:ca:a8:
a1:46:c5:24:f7:d4:6a:dd:58:fb:8c:d0:71:42:0b:
a5:47:7b:b4:81:71:05:fe:ec:79:6e:97:fd:5d:a4:
d7:17:b0:c2:e0:14:cf:49:68:49:65:a9:42:0e:2a:
45:42:14:25:a9:e7:d4:a9:70:41:c5:4a:95:ca:8a:
70:41:6c:96:43:f9:27:e0:02:1c:d3:32:4a:d3:40:
a1:12:7b:d5:b8:26:9f:f3:c1:5a:4b:b4:c2:ce:22:
a5:6b:33:74:97:e8:f3:cd:f5:ac:1e:83:c7:80:a4:
0c:f2:ef:c3:b9:09:84:e0:05:78:0a:b4:89:c5:b6:
dc:91:06:31:52:47:dc:80:46:e3:9a:df:a0:86:2d:
e2:1d:22:7f:ba:3d:94:3e:8d:c9:00:81:0e:6f:c0:
8e:38:7f:42:48:10:8b:34:90:32:df:85:45:6a:92:
9d:13:76:da:4e:2f:fc:5d:31:3e:51:e8:69:26:3f:
bd:53:50:1e:a9:45:3a:f8:45:15:de:4d:b4:1b:4a:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:DE:4B:F6:D8:A5:CA:0D:4F:7E:3A:26:89:6C:27:8D:7F:63:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ccea0d88-538a-3e10-82d8-a8590810a511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:cf:76:cb:08:17:cb:a5:ee:5e:75:b1:71:09:e2:f0:f8:2d:
e0:ab:06:24:d7:f9:d9:48:2e:92:50:78:70:d0:10:aa:b1:27:
7a:db:f8:08:f9:ba:36:32:9b:81:ef:67:49:23:df:10:0d:48:
32:44:a1:bc:e6:34:63:4a:29:b6:48:86:19:60:65:70:4d:74:
aa:d1:e7:9a:39:2b:70:8e:a1:f3:5a:e0:90:46:3e:8b:83:17:
2e:87:36:e4:41:48:8b:fc:72:d5:82:ee:09:4e:b2:de:c0:d5:
e3:58:5a:f5:d1:f7:fc:b9:43:16:28:07:74:e9:00:45:75:6a:
a5:cc:2e:cd:95:b5:1d:fd:a3:c7:2c:fd:c8:f9:be:86:07:e5:
1a:39:e3:56:f4:b0:fe:53:26:02:73:0d:c6:c7:99:82:23:e1:
60:29:15:c1:5d:1e:5d:cb:00:6a:71:07:b1:5b:e1:7c:ac:53:
57:39:a0:2e:78:af:2a:96:fd:2e:88:fd:e4:30:1b:a4:5e:0d:
27:6a:94:e2:dd:5e:77:d2:5c:70:ac:f8:5c:c4:80:21:0d:60:
cf:cd:0e:b3:a5:0b:87:f8:af:53:f5:8b:bc:14:ee:91:35:47:
0e:84:6e:04:2f:7e:cb:38:42:2b:ec:e0:a3:34:1b:91:e7:6e:
cd:77:a6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org