Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/202c62b4-6130-3932-83d4-dc301b5d0e8d.roa
File: 202c62b4-6130-3932-83d4-dc301b5d0e8d.roa (raw, json)
Hash identifier: fqejXrPbzQ0pIZJemlgDs5u6H/cUab8tsypUGDBR9d4=
Subject key identifier: A3:30:89:76:35:4A:D5:70:3A:5E:55:42:7A:AB:75:1B:11:8D:9D:06
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B4CDAB0E0D3ECB9B80EB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/202c62b4-6130-3932-83d4-dc301b5d0e8d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.98.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:cd:ab:0e:0d:3e:cb:9b:80:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b0d8b94b-c76d-40cb-a1ca-e133feadac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:06:ff:40:04:40:f6:4a:ec:ea:d6:db:2c:
e1:05:81:20:2f:bb:58:8e:87:61:aa:2d:b5:fa:30:
a9:66:ba:88:86:39:ed:53:2a:76:cc:d9:37:c0:0e:
10:0b:1b:65:e2:4e:7a:a3:dc:8b:7b:b5:61:45:60:
28:d3:85:05:0c:35:e1:73:ad:16:04:b3:cd:be:bb:
d3:6f:fb:87:39:70:3e:aa:34:ba:b9:8b:34:a5:8d:
ef:f4:db:b8:ab:56:d7:28:ae:1c:8b:7a:ab:05:6e:
fe:5b:37:61:d1:33:aa:66:4c:eb:f5:66:cd:42:bd:
2b:89:5f:d3:1c:4e:3d:21:57:70:83:97:76:ad:a0:
e8:3f:34:94:7e:bf:96:fc:9a:70:df:cf:2c:7c:1b:
78:9f:4f:ab:b6:7c:3b:c2:02:33:7a:2e:2f:5d:39:
65:4c:8f:0e:cf:85:1c:f6:25:2f:70:eb:5b:5f:cb:
a4:47:f2:21:0c:22:65:d9:93:2a:2d:bf:6b:32:ec:
4e:c4:50:33:e3:92:28:46:06:60:bd:37:cc:33:ca:
d7:50:be:e5:17:4f:0d:70:6f:b9:1e:c7:88:b3:cb:
9d:f0:b7:0a:65:1b:e0:c4:d6:f0:ae:67:23:ad:ab:
84:d9:03:75:81:9b:50:cc:1a:2b:83:b8:7c:3c:a4:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:30:89:76:35:4A:D5:70:3A:5E:55:42:7A:AB:75:1B:11:8D:9D:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/202c62b4-6130-3932-83d4-dc301b5d0e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:a2:54:98:81:2d:3e:4d:c6:24:a4:c6:91:b0:8b:30:ea:d7:
0c:40:2e:82:45:de:fb:b5:67:e2:c4:f7:9e:91:a6:fe:61:a8:
b1:06:49:4a:60:af:ee:48:a5:0d:e8:e0:da:17:11:43:31:6c:
c8:30:4c:82:af:b5:9a:05:ee:72:87:ec:72:13:2c:b3:ea:f5:
a7:58:1e:8c:60:af:60:bd:df:03:d8:c4:30:f9:a9:33:8a:b2:
24:ba:f7:f7:8a:ce:cc:47:cd:23:b8:50:76:1e:54:5f:ac:fb:
6c:4d:02:01:35:c8:39:83:19:c2:9f:aa:6d:29:7b:16:51:78:
ba:63:98:e9:50:eb:cb:bf:d9:d5:65:ec:b9:f7:9b:2d:ff:30:
5f:57:29:89:09:95:bd:eb:6f:27:a0:87:c1:b8:20:d9:05:20:
7d:fd:e0:de:e1:e2:6b:17:1c:a1:6e:36:2a:68:e2:b2:d4:86:
fd:78:a1:5c:04:af:db:85:91:dd:36:b4:f4:9b:73:9a:63:4e:
66:78:ce:53:a0:d0:05:e4:1f:a7:ad:89:85:6e:47:ce:de:43:
2a:04:55:51:03:ab:32:62:71:f8:09:94:9e:c8:67:73:f2:15:
99:79:2d:2a:f8:7a:6e:6c:93:64:8e:c7:a6:6a:6c:0b:6e:14:
1c:4a:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:16 2023 by rpki-client on console-ams.rpki-client.org