Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ec6699c1-b82e-30c2-8bb7-fb483ed9a821.roa
File: ec6699c1-b82e-30c2-8bb7-fb483ed9a821.roa (raw, json)
Hash identifier: A/OpsCJX5UPrWfIweHsvmIs5u11aiINVTNM9Ra400yI=
Subject key identifier: F0:D3:A0:16:19:AF:72:8F:AF:81:96:D2:FD:FE:10:0B:F9:06:3B:C6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B4DB5A15380DA5209F7440
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ec6699c1-b82e-30c2-8bb7-fb483ed9a821.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:db:5a:15:38:0d:a5:20:9f:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c9668437-8686-440b-a35b-7368a20b9a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:70:10:20:d2:41:28:8a:f8:ab:74:e5:05:
c3:8c:56:1b:84:39:6f:c3:1c:7c:11:11:70:e4:35:
12:ab:32:ea:0f:34:ae:b6:bf:f3:92:35:35:3d:14:
4c:53:e3:a2:bc:10:ab:e7:21:63:0d:4c:a9:f3:93:
f4:a6:4d:03:ae:3f:43:89:d8:1b:61:e1:2b:8b:a5:
b1:a5:76:bc:b9:77:8f:66:24:da:21:a8:8e:5d:c0:
e1:be:f1:ef:ea:07:96:1f:7e:3f:3e:91:47:67:22:
ee:25:66:52:e3:42:22:7e:1b:e0:4c:80:d5:fa:23:
5f:d0:e9:e0:af:8e:3a:f5:4e:2b:14:1f:6a:88:a4:
15:42:55:4e:89:e2:15:6d:ab:53:9b:7a:f8:65:e9:
15:f3:dd:b1:39:de:20:70:ad:bd:58:36:3d:59:e2:
5a:10:d8:91:ad:72:6b:2a:cf:0f:6e:c0:28:ef:a4:
1b:ce:3e:09:6a:c0:18:ff:53:ea:56:8c:88:5d:b9:
59:7a:56:47:34:0a:bb:4b:c8:41:85:e6:a5:f8:21:
64:77:33:61:a5:2b:81:15:f6:0f:5f:d2:de:da:8d:
d9:80:6e:9a:6b:fd:f4:e5:fe:30:e0:38:1f:2d:a3:
70:a0:08:f4:24:b7:42:d0:1d:04:4f:35:ce:67:f3:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D3:A0:16:19:AF:72:8F:AF:81:96:D2:FD:FE:10:0B:F9:06:3B:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ec6699c1-b82e-30c2-8bb7-fb483ed9a821.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:f5:09:f0:ee:bf:f6:a4:8f:42:f4:88:fb:f8:68:74:a9:b0:
ba:c4:9d:dc:b3:f2:64:e7:c5:1a:a5:13:3d:d0:0a:88:37:76:
26:27:54:c1:c3:6a:5c:0e:ba:10:5e:87:fc:f5:dc:01:4a:fa:
26:49:5a:79:3f:0e:36:56:b1:a1:54:ec:17:12:11:d1:86:7e:
e5:3d:fd:1f:8e:d8:7b:85:78:1e:f0:d3:51:7d:27:bb:63:bb:
f3:bc:3a:fc:8d:83:dc:f6:f9:2e:b6:7f:63:50:fb:df:92:88:
76:50:6c:4b:6e:c9:d1:56:6f:16:b4:08:18:6b:e0:a3:af:4a:
b9:9f:20:ff:13:78:15:99:76:08:be:79:e0:e2:d0:e5:95:32:
f1:71:9c:9b:59:8f:94:59:49:08:fc:d6:6d:bb:1a:0d:3c:1c:
79:ad:24:bd:e8:1d:b7:ff:53:1b:69:f0:bc:3d:df:a1:bf:42:
c8:74:5e:c4:43:2d:fc:af:c2:9c:8d:7a:cf:1b:57:1a:85:b9:
a1:68:6e:41:3c:bb:4b:83:00:6a:ad:82:20:5e:8a:00:8d:5c:
e6:8f:c5:74:6d:ff:31:dc:8f:f3:b0:3c:05:61:b7:33:f4:97:
dd:72:3f:4d:95:8e:ec:e0:4b:6d:1a:19:57:4e:76:11:0c:16:
83:d0:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org