Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de2989b2-2bcf-3531-878b-3e26276ec7da.roa
File: de2989b2-2bcf-3531-878b-3e26276ec7da.roa (raw, json)
Hash identifier: 1ZkAy1fpKf6KEjk0zmKVOHYMupXds6BTEx1ZQR+Z/6A=
Subject key identifier: D0:BF:3C:DE:71:8F:BC:9A:14:0A:9C:33:23:F5:C1:E3:E1:81:E9:25
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B6A4CB54C0A57784B36A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de2989b2-2bcf-3531-878b-3e26276ec7da.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b6:a4:cb:54:c0:a5:77:84:b3:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f9d57eef-b655-44fc-bbe9-1d6204101937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:6c:60:47:c8:ea:49:95:d1:64:30:81:eb:
fc:75:3b:7d:3e:b2:05:27:f5:e0:f4:f2:3d:c8:6e:
8c:ee:6a:82:5e:50:23:ce:41:a5:df:1f:c4:40:ec:
b9:34:e8:b8:36:dd:53:0f:6d:78:19:52:ec:f9:51:
e7:49:20:53:0f:93:f1:97:d6:0a:69:14:6b:58:0a:
e5:c1:ad:7c:7b:42:17:e6:6f:0a:f6:a0:67:6e:87:
36:b4:a2:6d:2f:6a:7b:df:af:89:7d:0a:f2:d3:26:
9f:1e:51:1f:ce:fd:ff:5b:45:75:34:07:39:da:60:
de:4c:54:6b:cc:ae:98:e0:f4:3d:94:75:52:07:c8:
cd:5b:f5:86:7b:bb:30:29:da:7e:b6:dc:d3:dc:7b:
15:41:59:b1:bc:c3:cf:70:54:cf:85:a3:f3:5f:73:
04:59:29:b8:af:ee:7d:df:a6:9e:9c:c3:80:3b:72:
c9:79:2a:7e:60:81:f5:17:68:4c:62:60:40:f6:88:
cf:8f:b6:a1:93:f4:b4:31:7b:72:ab:16:0a:1f:9d:
e6:8c:f3:6c:08:0d:b3:dc:95:a7:83:aa:6d:ad:2f:
0b:05:f7:22:ad:5c:c8:74:ea:d1:e7:a0:92:a4:af:
f0:86:e2:5c:ca:e7:1e:20:ab:25:16:2a:7b:0a:47:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:3C:DE:71:8F:BC:9A:14:0A:9C:33:23:F5:C1:E3:E1:81:E9:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de2989b2-2bcf-3531-878b-3e26276ec7da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:80:a7:b1:f2:0b:87:e6:ac:d5:57:63:d0:b6:c9:a5:b6:55:
d1:b0:12:0c:c1:26:2c:8d:18:27:16:5d:73:ec:48:00:be:64:
a6:2f:48:83:36:a6:aa:27:12:9d:76:de:fa:85:ce:cf:35:ca:
63:d5:53:f1:84:e2:e7:a5:4d:26:c5:fd:07:9f:db:61:33:7f:
d2:32:13:33:60:f9:d6:80:3a:85:c0:66:5e:d7:19:d1:84:4d:
dc:84:32:cf:a4:83:1f:c2:ef:7e:29:d7:8f:51:7e:80:b6:b7:
ab:f4:d1:43:e4:f7:eb:89:55:18:5c:12:aa:ac:fb:67:f8:37:
fe:02:47:c3:13:9c:73:06:4b:ac:54:c5:c0:8e:b1:9b:1f:6b:
56:49:31:2c:4f:8a:d8:56:d6:22:46:bc:aa:10:23:7d:33:89:
21:93:5b:3f:8a:52:9e:d9:76:38:d6:9a:06:12:d0:d8:44:97:
6a:7b:93:a6:bd:c4:3a:7d:cc:78:fc:f5:f6:97:6c:ee:d2:24:
0e:fa:78:35:de:48:af:3c:7d:73:39:30:b7:07:80:25:94:e6:
fd:b8:a3:eb:eb:99:d8:3d:57:77:7f:bd:6b:6c:2d:25:4b:10:
31:30:b8:df:50:92:a5:c1:4c:f6:bc:f8:94:fe:2d:ca:f1:34:
8f:dd:2c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org