Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ddfe991c-f1ff-348d-867b-c3a802149bee.roa
File: ddfe991c-f1ff-348d-867b-c3a802149bee.roa (raw, json)
Hash identifier: cmMHfgLF6NKPMJcIIf9BoUszN5fnjNOAajjsMik2Rhs=
Subject key identifier: 09:B4:65:7F:A2:09:60:EC:50:95:6E:73:B0:91:57:7C:47:DF:5D:76
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B269D8FEF8EAB1D9776870
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ddfe991c-f1ff-348d-867b-c3a802149bee.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:69:d8:fe:f8:ea:b1:d9:77:68:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1ce5e189-8ba7-4d16-96c7-a3e9036935b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:ec:77:26:af:1a:9a:d3:d9:a6:a5:7a:29:
6a:d5:c3:4a:c4:0e:69:ca:1b:37:6a:4d:a6:3e:5e:
9c:e3:44:a8:78:f2:95:25:9d:0d:88:17:ea:d0:83:
1c:7e:e7:87:73:40:50:c7:fd:bc:44:7b:83:cf:0f:
b7:e1:0b:f0:27:db:1e:36:c8:f2:8a:c2:fd:15:86:
e3:27:e1:6d:1d:6a:7f:ec:71:40:59:cf:c5:c5:69:
7b:2d:ae:4a:06:2a:73:a9:1c:dc:f9:f5:4d:0b:91:
4a:44:7f:02:76:f5:8a:f6:cf:5e:4c:57:48:92:3c:
19:2c:78:02:cf:14:73:14:ad:45:a9:85:3d:ca:9e:
11:a4:ee:ff:b8:5d:91:82:0e:c1:fd:8f:6e:9c:2c:
e2:42:b1:cc:4b:22:d0:9e:39:84:d3:d9:37:84:52:
d8:06:b7:82:e1:d8:6a:ce:dc:fd:7b:26:d9:cb:63:
11:c7:27:66:95:f4:f0:62:24:53:ff:ed:5f:61:92:
05:90:32:25:a0:e6:34:ac:18:26:74:36:b5:d8:2b:
57:06:fb:a7:6f:42:60:ed:42:94:c5:48:bf:80:da:
ea:76:55:48:59:1a:43:b9:84:3d:69:1a:b6:fb:cb:
e5:3f:c2:12:82:56:14:93:b4:9e:9d:7a:c5:c5:0a:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:65:7F:A2:09:60:EC:50:95:6E:73:B0:91:57:7C:47:DF:5D:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ddfe991c-f1ff-348d-867b-c3a802149bee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:29:a4:0a:40:a4:fe:d8:bd:b3:87:5e:7f:39:24:28:1f:9a:
7a:0f:61:8a:14:6a:2a:d5:7c:fc:de:89:4e:53:d9:82:d5:82:
f6:c5:22:d6:f7:b1:ed:d3:4b:fb:7b:f5:30:5e:e7:7e:d0:37:
83:5b:11:f8:c4:f6:54:25:8a:69:97:43:bd:bd:05:c3:e6:72:
3b:e4:05:82:f9:c7:7b:dc:87:96:4b:b9:90:43:1e:35:63:af:
9d:38:59:e7:59:fb:c0:2c:df:37:96:88:27:4c:43:5e:03:28:
ff:af:c2:9e:c4:81:92:89:66:b0:d6:60:03:e6:7b:80:84:9d:
be:65:ee:f3:52:e7:89:d5:be:4b:fc:0f:72:8d:19:42:4f:ed:
f9:61:66:e8:d2:af:06:63:4b:1a:6b:78:bf:8b:3a:38:7b:65:
c3:59:67:7b:c3:c0:0c:4c:91:d3:60:ee:dd:0b:f8:db:ec:42:
30:55:d9:b1:b3:8b:19:40:5d:87:13:bb:f8:7d:0a:10:4d:78:
00:bb:21:84:54:65:90:07:5c:06:38:0c:05:f2:51:c5:bb:52:
5c:d9:b6:34:9f:3a:30:43:56:8b:63:90:1f:6d:d1:cc:15:f2:
1a:c2:8b:28:70:37:91:80:68:09:05:dd:fc:43:fa:0f:8f:3a:
6c:11:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org