Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d5527269-92c3-3be6-9ced-8080fc62ad3e.roa
File: d5527269-92c3-3be6-9ced-8080fc62ad3e.roa (raw, json)
Hash identifier: 4AIumD7TAF36MKg2yG01ECerD9r9Gxw30koJzcbrr3M=
Subject key identifier: 28:32:A5:AB:34:CC:93:5B:D2:A0:9C:72:AB:AF:23:6D:FD:BF:A8:32
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A92648D91D7546131653D0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d5527269-92c3-3be6-9ced-8080fc62ad3e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a9:26:48:d9:1d:75:46:13:16:53:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e684ae60-e953-4b32-b7ee-b40e16174ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:f3:ff:a3:1f:ef:3f:ed:70:c4:d2:49:79:
95:ad:34:71:4b:e5:25:83:f5:56:2e:59:7f:ab:f3:
77:ea:7e:f1:ef:d9:77:8c:48:10:cb:41:2d:67:24:
a8:9d:c1:c8:40:7d:06:b4:ef:0c:e2:8d:7a:c1:42:
81:e9:a9:3c:a9:8b:ae:80:af:2a:d7:fc:e0:f3:60:
bd:24:cc:0f:2b:64:74:d5:20:b2:6c:c3:5b:24:90:
e8:cd:53:97:bb:4e:56:69:2f:cb:8b:3b:63:b2:5c:
05:ee:bc:45:0b:f6:16:0b:31:bd:bf:f0:e6:6b:2b:
9e:13:5f:f2:db:ae:3d:04:07:42:cc:56:36:c7:40:
80:08:87:eb:86:61:76:3f:0b:ae:02:cb:dd:cf:48:
7c:1d:2f:97:0e:c8:25:5b:17:69:1f:c2:f0:aa:f1:
b1:a2:3a:1e:5b:f9:0c:53:3a:1f:85:72:b4:35:b9:
c1:71:d4:d2:12:f7:86:be:ee:5b:68:3b:1d:1b:3b:
90:68:ac:86:38:f9:b6:86:65:a7:d0:61:f0:32:e7:
c2:26:91:9d:42:88:8c:6b:85:3e:4c:79:f6:ce:c0:
5f:08:6c:4a:3b:f7:70:c8:cb:a7:a6:72:fb:6d:17:
9e:64:9e:2b:8e:ea:04:21:a5:23:ac:41:14:a0:59:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:32:A5:AB:34:CC:93:5B:D2:A0:9C:72:AB:AF:23:6D:FD:BF:A8:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d5527269-92c3-3be6-9ced-8080fc62ad3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:72:2b:a7:e2:32:ad:22:26:dd:77:91:8c:58:d6:61:be:e3:
4f:f1:d8:fe:62:91:87:5e:91:ce:08:79:4f:06:97:fe:63:59:
7f:07:74:50:9b:04:47:c0:ce:0a:20:1c:b8:61:fa:78:14:d6:
2e:50:dd:68:b2:b1:48:0f:94:58:0b:f5:fb:08:09:3a:93:ee:
df:02:99:c0:6d:88:60:0b:3c:e6:cc:c1:dc:dd:83:30:52:f8:
df:95:77:eb:da:7a:59:4e:54:52:08:fe:0a:2c:35:07:ca:1e:
db:de:df:c7:2e:f4:af:6f:66:dc:71:8b:fe:06:71:62:fd:2c:
c0:e5:6a:43:12:87:74:ae:c8:18:34:29:1b:01:29:15:ed:0e:
dc:44:13:52:b2:27:c9:66:41:66:19:ea:87:5d:d0:d6:eb:24:
d7:1f:a1:0f:78:f9:26:51:c4:dc:fa:47:20:14:de:d2:18:67:
a1:10:9d:9d:64:2d:c6:aa:61:ac:68:7f:ca:36:3d:ec:79:84:
9f:5a:4b:4d:08:d2:55:e7:13:a9:e7:83:10:9b:05:05:06:4c:
ec:5b:24:c6:5e:21:3a:11:cf:d1:13:6d:5c:59:be:22:30:9a:
7d:26:76:81:7f:d4:59:98:ba:b7:50:0e:e9:ed:e3:6d:d0:a1:
60:53:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:14 2023 by rpki-client on console-ams.rpki-client.org