Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36ad1df6-7203-3a13-8340-c4443abeca03.roa
File: 36ad1df6-7203-3a13-8340-c4443abeca03.roa (raw, json)
Hash identifier: M77uvpITlslpLNqW7rpAfndTs5Zxbd9pbfqdJjBIUMs=
Subject key identifier: CD:41:D3:1F:2C:15:95:15:91:5B:BB:52:6F:96:60:B1:AA:95:BE:45
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AFAD4811B728BF36C525C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36ad1df6-7203-3a13-8340-c4443abeca03.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.137.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:af:ad:48:11:b7:28:bf:36:c5:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=bafb954b-241e-40eb-ac81-ee66db0699c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:2c:68:a8:4e:0f:25:be:da:90:a3:6e:49:
6b:cb:10:b0:93:a2:c1:f7:28:28:b5:91:67:b7:fa:
b9:cf:24:14:ba:19:89:68:99:b8:f3:46:52:f9:32:
dc:a7:2d:f7:f1:97:12:ae:ab:8e:d8:10:4f:5b:ec:
33:c5:09:c4:77:bb:b9:f3:10:21:e2:5b:1f:cb:87:
6e:93:31:1c:79:0e:dd:f7:11:b0:b9:2f:ee:f7:4a:
44:7e:9f:9f:4f:df:d4:ae:af:d7:5a:8d:84:ff:7d:
fc:b4:21:57:26:70:09:28:07:79:21:c4:72:69:b5:
44:80:83:2a:b4:e0:1b:de:8f:cf:88:73:f6:8f:ba:
19:48:b0:3e:ce:58:ac:82:d9:33:e9:f7:7b:63:8b:
ee:1a:a2:79:06:ea:5d:43:4f:f9:31:7e:ef:cc:ef:
0e:e0:b1:e2:10:3c:52:fa:f0:50:08:63:5f:8c:09:
ec:14:3d:ae:10:9b:ac:7b:f1:b9:1a:29:09:9c:df:
38:2b:1f:63:d2:8d:4e:af:f9:9f:f6:5e:ba:67:8c:
ba:76:cc:1b:c1:7d:1f:09:0a:04:cf:72:c2:71:db:
08:7c:07:6e:54:ef:9d:3f:18:e0:f7:9c:10:24:e5:
99:9d:80:2f:dd:f0:ed:e1:a3:95:3b:63:18:ab:54:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:D3:1F:2C:15:95:15:91:5B:BB:52:6F:96:60:B1:AA:95:BE:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36ad1df6-7203-3a13-8340-c4443abeca03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:cb:15:2b:05:73:99:ff:56:29:c8:18:2d:d9:7c:4c:8b:c5:
a8:5d:58:7b:8a:2b:f7:f4:3f:42:35:f7:9b:55:da:95:7e:2d:
28:0d:55:5e:d8:11:71:56:b8:51:fe:0e:ce:d3:48:5b:bd:3b:
fa:88:72:ee:d8:a9:cf:47:ab:5f:bf:38:aa:1c:17:b4:f9:d3:
df:e2:57:7f:43:b2:bf:39:2d:13:4a:98:42:ce:c0:5c:b1:dc:
76:e5:52:1b:e6:ab:4a:97:49:ac:4f:b0:53:7d:5c:da:11:ff:
50:d2:db:58:fa:75:c5:26:d8:61:a9:f4:3e:db:9b:e5:a1:bd:
14:7f:c5:12:bf:31:f7:e4:d5:0d:63:91:ea:7b:11:7f:fe:af:
34:90:95:32:3d:71:f1:db:31:ba:83:ae:ee:01:c8:2c:1a:bc:
c7:06:48:ce:b7:30:76:c1:98:b6:3a:52:c9:d8:c8:74:80:af:
f1:3d:03:46:16:b5:a2:a3:59:47:52:15:a0:ef:72:b9:f5:db:
72:a3:08:d2:b0:67:b4:4a:de:f0:71:75:5f:b9:13:3c:8a:1b:
89:40:ca:77:cc:f2:09:4c:59:3d:ff:62:1b:f9:a0:62:55:d2:
b9:90:e8:89:05:64:44:ac:2b:9a:f1:5d:3f:e8:d2:48:f9:7c:
2a:5f:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:41 2023 by rpki-client on console-fra.rpki-client.org