Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/957c2ff0-f9aa-3641-9cbb-00760b8cda43.roa
File: 957c2ff0-f9aa-3641-9cbb-00760b8cda43.roa (raw, json)
Hash identifier: MSpZI8gaoDkvlzwR7hBT1C5A/xnCkh60SJoljKh3QDA=
Subject key identifier: C1:AD:DC:72:C6:81:DF:4D:0F:35:F9:1E:9F:AD:DD:E4:DF:6E:D9:A1
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7BC111778BEF9CDB99FC780
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/957c2ff0-f9aa-3641-9cbb-00760b8cda43.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 104.237.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bc:11:17:78:be:f9:cd:b9:9f:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b5ad4213-df30-41c5-8f7d-78a606fd090e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:ba:a0:87:bd:31:b8:60:92:29:42:1b:9c:
fb:8c:b1:2a:92:95:ed:3f:bd:1e:7e:a0:d8:f2:a7:
e2:69:fa:26:bf:61:a8:14:26:9a:b9:d7:6a:34:5f:
5a:d6:52:50:46:8e:e2:58:7e:89:fa:48:41:62:7d:
36:ff:5a:45:be:e4:77:bd:dd:14:b5:19:56:fe:7f:
96:cd:4f:cb:2e:a2:02:87:f4:80:02:ce:76:15:46:
7d:59:d1:b0:81:34:fa:2d:f4:aa:f2:fb:1a:69:b1:
e0:1e:e1:02:81:50:fb:9e:53:3a:61:be:97:af:dc:
1f:b5:2f:ec:65:70:f9:36:f3:d6:88:ce:3f:41:50:
f3:6b:b8:46:59:d8:a6:7b:01:ff:18:7f:58:02:94:
e2:e1:ad:30:02:b9:2a:8f:70:0d:5f:61:7e:67:a0:
c7:f4:ba:f8:80:34:e3:9f:19:5b:84:e4:36:c4:cd:
26:26:f9:7a:8e:58:f3:57:60:0e:03:77:fd:24:b2:
16:64:5e:d4:4f:44:e5:5c:5c:52:08:40:e0:f5:55:
89:5c:c8:8f:57:a9:ce:fb:8d:26:05:ea:2c:50:68:
3f:0e:43:2d:9c:3f:5d:f2:96:c8:fb:fc:38:d2:c2:
5d:e9:28:37:c7:64:c8:c4:bc:47:f8:d1:0e:18:b1:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AD:DC:72:C6:81:DF:4D:0F:35:F9:1E:9F:AD:DD:E4:DF:6E:D9:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/957c2ff0-f9aa-3641-9cbb-00760b8cda43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:f1:77:99:d5:25:cd:d0:08:df:9b:03:4a:46:b5:25:44:a5:
83:b5:4e:4f:08:43:73:ff:7a:73:61:be:28:c2:d7:d4:e7:ce:
e9:c6:5d:fa:fd:05:26:0d:71:06:a5:1e:05:83:ff:bd:8d:7d:
4e:32:96:40:af:80:e1:74:3d:01:0b:90:27:3e:f2:0f:40:83:
a4:b6:55:90:47:b5:92:10:33:37:6d:70:11:06:bf:a7:80:71:
54:e2:7f:8a:7f:92:77:d6:fe:a8:e7:e3:1d:6a:c0:98:52:ac:
28:4e:82:0c:62:d3:3c:3f:51:cc:93:46:16:5e:3f:6c:68:91:
89:27:32:cf:01:00:17:78:a2:0c:9e:f1:69:48:30:b1:de:a5:
91:2a:3e:c5:07:9d:c2:de:4d:af:f9:be:ec:b0:f3:16:c2:03:
8d:76:e3:73:7a:76:37:04:98:a2:6f:91:e9:a6:8d:ca:a4:df:
cb:38:95:67:60:93:d3:2d:40:77:fd:52:77:dd:2c:25:d2:82:
6b:70:75:35:51:3e:29:f0:f7:51:a4:24:61:fc:54:8c:d4:75:
de:e1:7a:85:0d:8d:b8:9d:f6:f8:01:74:ef:bd:00:3d:4c:42:
e0:29:b9:9e:c9:56:6e:2a:2c:85:b9:73:32:e7:8d:b0:fd:c5:
d9:55:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org