Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dd8e5f56-a2c4-3de2-adc7-00767f4b56aa.roa
File: dd8e5f56-a2c4-3de2-adc7-00767f4b56aa.roa (raw, json)
Hash identifier: mcKyGqltf1zw+N1oaibUp586AI8L9Jzd7yLRJ2fSHnA=
Subject key identifier: 59:DE:A8:03:2D:40:13:2B:76:60:BF:C8:43:21:2C:53:C8:FE:83:C8
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BE1A9514A787292EB62280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dd8e5f56-a2c4-3de2-adc7-00767f4b56aa.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:be:1a:95:14:a7:87:29:2e:b6:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=5315265b-49b1-47ec-9629-809c72e6822e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:e4:41:5f:0b:ab:45:20:c3:5b:2a:01:46:
cf:9b:7a:bf:65:47:3a:51:c2:1a:f1:2b:cf:a7:b0:
08:e0:45:df:5d:91:98:cf:46:e6:ee:3f:e9:52:08:
25:59:1b:b6:a5:d1:10:ba:c1:4c:23:7e:e1:2f:df:
b6:d8:42:0f:88:31:d2:ee:2f:9c:0c:9c:b3:28:84:
39:20:ee:ce:fd:dd:d8:69:5b:1e:4b:82:86:5f:e4:
2b:94:ab:72:19:90:46:79:0f:16:82:a0:d8:65:ae:
68:9b:2c:33:3d:9b:a8:6f:b6:46:86:68:e5:5c:43:
e3:3f:03:b2:0c:5a:79:00:9d:07:5d:9e:0e:5f:1f:
2d:76:76:ff:72:0b:30:58:72:fc:5f:2a:ed:a0:32:
7b:6c:ba:77:77:3f:b0:10:30:aa:25:73:e2:0f:1d:
74:13:ef:55:51:cc:2c:22:20:fb:c6:a6:69:78:28:
96:66:f8:57:5b:3c:42:e1:37:d3:09:cc:6a:14:c5:
c9:67:1c:26:4e:bb:c3:48:6e:90:dc:67:68:99:fe:
b3:8f:21:d4:1a:0f:8e:e0:0d:3f:c6:70:46:af:96:
86:e1:2d:7f:d6:65:76:fd:8e:b1:51:70:f4:08:45:
07:26:37:6c:e8:a0:20:3f:a0:ec:7c:2f:f9:00:2b:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DE:A8:03:2D:40:13:2B:76:60:BF:C8:43:21:2C:53:C8:FE:83:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dd8e5f56-a2c4-3de2-adc7-00767f4b56aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:dd:7f:6a:59:0f:51:65:99:b6:b3:2d:4b:a5:84:eb:8e:bd:
cf:cb:cd:9b:fa:56:db:da:bf:68:b6:f2:c8:b8:65:15:81:51:
47:06:93:94:33:b1:6f:c4:c6:22:04:a0:c8:2c:df:c5:12:81:
07:aa:0b:b0:82:03:e1:74:ab:5c:b5:d5:d2:df:0f:01:6c:ec:
aa:59:e7:8d:96:a0:5a:b3:45:fc:38:fb:78:b9:91:fa:dd:1f:
12:16:ab:e0:58:b6:0e:29:c1:f2:be:5b:69:dc:97:26:e3:f2:
b6:c5:9c:8a:df:ed:be:08:68:32:35:f5:97:03:80:f8:9b:36:
99:d1:59:89:f1:90:5a:1a:ef:99:6d:e7:6b:8f:64:e9:1c:8e:
3b:cd:28:78:0d:dc:41:02:e9:7d:f4:76:b8:f3:f8:1a:b9:7a:
27:6c:eb:9a:6f:bb:8a:df:7a:74:11:0a:24:29:24:4e:8b:cf:
5b:e2:ff:31:58:68:1c:3a:a4:84:07:0e:1a:5f:3d:7a:f7:c3:
55:4e:06:36:f5:d0:1d:bd:a9:7f:83:ca:bf:d0:9c:5a:62:61:
33:38:4e:53:c3:f4:6e:c4:57:72:20:61:ce:27:04:aa:08:4b:
5d:cc:92:70:fe:39:57:d3:40:21:27:d6:da:ff:b9:0c:60:57:
fd:ca:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org