Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ce4ad16b-95ce-39b2-a3ca-a4e037fda231.roa
File: ce4ad16b-95ce-39b2-a3ca-a4e037fda231.roa (raw, json)
Hash identifier: Hm2luvCQhwc2w+HIHXAWW6ZmDVEpYMKkt4U9fFMbdLg=
Subject key identifier: 55:B9:AE:DA:47:91:E0:75:85:A4:96:03:05:46:27:7C:76:7A:BC:58
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7AC5D7094931858E8344100
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ce4ad16b-95ce-39b2-a3ca-a4e037fda231.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 104.237.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:5d:70:94:93:18:58:e8:34:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=dbebc223-70d2-4248-9606-0c0dcdf0eac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:d4:b6:ca:fe:75:fe:b9:f0:46:d7:90:fc:
75:b6:e4:5d:0d:49:91:d9:d7:4d:46:bf:5b:9c:31:
53:a1:39:cd:5b:e3:fa:5f:a2:23:06:ce:94:49:bf:
f1:2d:75:94:f7:cf:a2:8f:0e:6e:c0:bc:aa:56:94:
53:1d:20:15:62:89:be:49:bb:53:02:ca:2b:18:27:
24:8d:8a:be:3d:38:68:2f:79:5f:8d:4e:13:a3:c4:
6f:00:b3:05:e0:3f:b7:57:74:bd:66:62:30:99:3d:
b2:ea:5a:7c:6c:9f:fa:aa:ed:19:71:27:f1:3e:c3:
c3:a1:0a:c2:26:37:22:db:db:c3:ee:73:c9:15:aa:
a7:1f:3b:ae:b4:2b:01:ee:59:94:0e:13:be:85:d5:
cc:57:d7:ee:84:b7:82:f9:ca:86:32:22:50:c3:f8:
85:b3:a5:a6:1a:95:f4:23:cd:0a:cc:78:21:e9:a2:
86:a8:1b:17:43:4b:6f:ba:f1:b4:63:14:76:8b:19:
fc:b2:81:dc:3b:60:8b:55:f7:bc:69:ed:62:82:64:
64:70:4d:67:00:f2:da:55:4b:52:ff:8c:bf:2e:ba:
c0:9b:9c:71:47:21:59:27:31:31:a3:61:66:7f:27:
1d:5b:54:87:5f:06:cb:25:78:d8:35:d3:d7:ae:91:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:AE:DA:47:91:E0:75:85:A4:96:03:05:46:27:7C:76:7A:BC:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ce4ad16b-95ce-39b2-a3ca-a4e037fda231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:2d:99:7f:8c:53:fd:c1:0a:ef:5b:52:d4:2b:8e:c5:d6:c1:
4e:a1:53:8a:89:87:28:0b:d2:ac:6f:28:4b:a9:06:a8:5d:0d:
ec:89:4d:90:97:68:c3:bf:60:dd:18:21:59:4a:ae:9c:b7:90:
01:21:5d:01:18:f7:93:90:7e:3b:a4:f6:72:ce:d9:17:6d:9a:
ed:85:ef:56:c3:9d:73:32:9b:c1:44:52:04:21:4f:98:c6:cd:
3b:82:f5:a6:98:9b:3a:47:fd:21:3e:99:d1:cf:21:1d:74:63:
6b:57:5d:8c:74:78:c1:64:9d:8c:72:e9:68:ae:33:13:be:bd:
23:b7:6d:71:7b:07:9e:eb:c0:5c:3b:a8:d0:b3:6e:76:ed:65:
45:ef:c4:2b:d2:07:c8:ee:01:5c:92:2e:12:d5:ab:21:84:8c:
93:d6:b5:7e:68:44:e9:7e:40:b5:d4:7a:b8:e8:f4:48:42:91:
69:0e:d8:c6:53:2e:42:58:fb:ac:16:ed:08:b7:19:5f:16:7a:
90:04:a4:e8:4a:ec:03:28:b5:d3:81:d6:56:f1:b3:dc:34:9a:
db:f0:06:8d:d0:7b:4b:5c:76:f8:7a:3a:c2:ac:2a:09:b1:0b:
12:a8:39:0f:b5:7c:46:2c:78:c0:8a:2d:f9:e2:a5:05:72:4a:
f8:9d:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org