Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d11861da-c919-3cf5-8b86-f63297358582.roa
File: d11861da-c919-3cf5-8b86-f63297358582.roa (raw, json)
Hash identifier: +ooUHjXX3MXZxAfHwurTHR8eWLx7DviadnNSTBD8e6w=
Subject key identifier: 7E:77:DF:1A:8F:FE:74:3E:0B:48:E3:93:75:12:91:8D:D8:E7:6E:C0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A4DF9FAC9A9E46D4CF7DC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d11861da-c919-3cf5-8b86-f63297358582.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a4:df:9f:ac:9a:9e:46:d4:cf:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=28ac0c44-71aa-4c9f-9971-d77ebff798f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:17:f1:c9:b2:a5:72:c9:c2:f8:64:a8:c0:
d1:03:b7:c2:5f:7a:7d:74:53:0f:93:93:7a:e2:cf:
55:0f:34:f3:88:15:7f:12:e9:0d:36:dc:49:e4:94:
77:0d:db:60:68:1e:32:67:01:5c:84:b6:84:48:76:
82:87:5f:39:ac:28:79:32:4a:fd:f8:b0:83:00:81:
4a:a2:f4:9c:85:ff:be:03:e2:51:f4:73:6b:60:60:
ae:79:dc:6f:4d:8d:85:1b:9b:e5:d3:59:b5:26:4e:
64:3f:5f:29:b2:46:f6:31:8d:83:23:d6:2c:71:1d:
2f:2b:7b:74:e1:29:6a:68:2f:d9:b7:a9:18:49:40:
5b:01:a6:ba:0b:92:a3:ab:77:69:43:48:ee:7e:09:
a0:97:65:91:bb:3f:b5:7d:cd:10:70:b9:87:fb:98:
80:3e:45:15:0a:7b:40:fc:c2:04:8b:70:73:fd:d5:
be:44:af:46:26:04:b6:94:8a:c2:39:b9:69:7e:83:
0f:df:09:96:ac:2c:5b:cc:d9:2b:29:18:b2:c0:d2:
3b:ca:c9:56:fe:70:98:ea:73:26:4c:38:ff:8c:2c:
a9:46:9a:72:b1:7a:44:78:ca:69:49:78:d7:b0:30:
4c:82:83:29:5f:c3:7d:ea:6c:f6:e8:75:c3:e0:0d:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:77:DF:1A:8F:FE:74:3E:0B:48:E3:93:75:12:91:8D:D8:E7:6E:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d11861da-c919-3cf5-8b86-f63297358582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:4a:a8:22:13:a1:2d:f2:ea:22:ab:e0:2f:20:e2:39:54:3c:
3a:95:5b:20:ea:7b:12:9e:bc:3c:5e:04:82:de:9f:a4:cd:e3:
27:5e:5c:f9:33:4d:aa:30:c6:69:0d:bb:87:ab:04:87:97:f9:
32:b3:82:e7:65:a5:94:63:8c:44:44:cb:0a:79:bc:0b:8f:c5:
5e:fd:eb:b3:15:72:4e:cc:06:1c:c6:94:70:f2:dd:80:a4:3f:
d1:d2:78:a7:5b:7b:56:9d:ca:93:fb:48:35:0b:57:1c:6a:30:
fa:04:41:5f:20:f7:22:14:5b:20:07:97:3e:97:b8:01:7c:6d:
df:52:5c:80:56:89:d0:c2:ac:30:dd:fd:92:41:61:fa:d8:f2:
78:45:8f:ff:e2:80:f5:77:52:0e:31:ea:52:7c:ab:74:6b:f3:
42:bb:54:e3:6d:ad:e6:80:01:e6:ab:08:da:0f:33:38:f8:ca:
2d:13:90:9b:12:0d:db:ec:70:22:e3:e8:3f:1c:69:a6:15:ad:
41:e9:55:37:bd:20:6d:05:95:73:0e:b1:53:e7:7f:f4:aa:bc:
7f:42:82:14:8d:02:9b:51:a9:52:03:29:8c:0d:57:14:13:54:
1b:19:35:0d:5e:31:f2:40:e4:de:e8:28:69:6f:82:c9:68:84:
22:78:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org