Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f9d08f62-e959-3ddb-ba77-70239eb5bec4.roa
File: f9d08f62-e959-3ddb-ba77-70239eb5bec4.roa (raw, json)
Hash identifier: AcuATyl+21I9IohnQx/yJQpQKR+2XFVOzRS3WQjjv7Y=
Subject key identifier: 20:B2:35:9D:36:24:C9:DD:D8:E6:72:14:24:C5:5B:A0:64:B6:6A:5E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7C56C35FEE4953734873A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f9d08f62-e959-3ddb-ba77-70239eb5bec4.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c5:6c:35:fe:e4:95:37:34:87:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7b625ade-67c6-4648-992d-227b355e9dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b2:a1:b3:14:bd:f9:73:ea:f4:9a:76:7a:b3:
2d:e8:06:21:d5:73:73:19:af:07:86:41:2d:c1:2d:
35:1e:36:de:9d:00:ff:0a:d2:db:98:8b:ae:9b:fb:
5b:23:b0:21:fa:8d:e7:6c:28:c4:c0:49:01:9c:3a:
93:87:47:55:a5:1c:37:6b:1b:f1:d5:97:47:53:e1:
51:e6:3f:84:cd:0c:10:ef:b6:f9:b2:52:4c:ca:5e:
c8:cb:c9:4a:f8:48:4e:9f:c0:72:3c:4e:45:b9:04:
09:70:9d:d0:41:0d:cd:e8:8c:ee:d7:35:4d:dc:f9:
20:45:87:17:92:c5:cd:51:a4:58:1d:79:ba:85:3e:
17:ad:68:be:fe:6d:7a:14:a4:fc:f4:69:3c:1b:b6:
96:0b:7a:c7:bc:a5:09:4c:10:b3:24:fa:89:8f:1a:
02:42:d3:d2:12:5b:63:af:9c:a4:42:7e:5b:d8:f5:
6a:c5:08:81:53:4b:68:6d:e6:aa:76:c5:89:8c:fb:
c5:14:8c:21:51:47:9a:f3:50:33:03:c8:bc:69:94:
d3:3f:8b:f1:cb:1e:7f:69:31:63:88:21:98:f9:b5:
36:60:0c:89:f7:02:41:36:2a:3f:03:27:af:2b:1a:
81:fd:f3:f1:ab:42:fd:c7:64:ee:29:62:5f:5b:1e:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:35:9D:36:24:C9:DD:D8:E6:72:14:24:C5:5B:A0:64:B6:6A:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f9d08f62-e959-3ddb-ba77-70239eb5bec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:e0:01:24:8f:4d:f0:19:6f:88:22:10:c5:f3:a2:5b:a6:6c:
cc:ae:61:bd:cb:55:82:82:d9:77:df:26:b2:c1:5e:21:44:d5:
6f:9e:cc:c2:c6:f2:a7:7d:24:94:af:1c:4f:11:79:20:96:ea:
9c:d4:b8:03:7b:59:10:6c:cb:b6:2f:61:d8:ec:b9:76:9c:6c:
87:1e:ac:89:3f:02:be:95:74:f9:39:50:95:c4:10:82:cf:a0:
a9:65:8d:ed:ed:aa:ad:e7:59:d7:6c:27:1c:12:cd:9e:f8:15:
dc:f3:e8:ae:f4:dd:12:bd:17:27:29:06:65:27:1e:22:a2:69:
bb:3b:ca:5d:6c:e4:e1:3c:d3:13:b6:0a:99:d1:ef:a6:31:99:
14:c4:99:cd:d0:0c:20:2d:a3:4e:f9:83:c7:d5:f2:1e:4d:78:
37:98:c9:f7:11:ff:72:2e:12:97:b1:94:fa:d9:28:69:e0:2e:
b2:e7:eb:72:a0:ca:e9:e2:ed:6c:60:a9:88:0c:a6:30:25:69:
f4:67:4e:f2:95:18:20:8d:c9:d3:4b:ec:0f:cf:79:50:b2:3e:
79:0f:f6:c2:57:31:19:d5:6a:67:a5:11:c3:80:d1:a5:0e:94:
35:4e:89:3e:d2:80:98:ea:e6:1b:f1:c1:9b:42:02:95:3b:44:
6c:03:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org