Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b76e7bf-bc0b-3329-8d15-6934fd4b00a9.roa
File: 5b76e7bf-bc0b-3329-8d15-6934fd4b00a9.roa (raw, json)
Hash identifier: l5+mRcRETDRMyUOsimhIRCmFCPWRkfM+34PkVHKBsCQ=
Subject key identifier: 9A:BA:54:40:14:66:F3:DD:23:5F:26:FB:66:63:03:E9:2C:0A:BE:6D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C28983F36329AA5261EEC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b76e7bf-bc0b-3329-8d15-6934fd4b00a9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.91.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c2:89:83:f3:63:29:aa:52:61:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=734a2e99-b683-4f55-8812-61dc5e15ec1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:96:20:ee:89:63:6a:1d:17:39:ca:af:a0:
b6:e9:4d:59:6a:31:e3:e7:06:fe:3c:c9:14:a0:c6:
bf:db:bd:da:30:cd:16:2a:55:98:e9:ab:7f:6f:20:
a4:ef:7e:e1:b5:45:21:3e:62:04:01:0d:1e:eb:6a:
48:9b:55:c4:97:e7:65:ca:49:71:fa:6b:29:75:d6:
04:c5:d4:80:5a:d3:df:17:61:02:98:a3:51:06:23:
35:46:6e:2b:63:8b:a9:61:3a:8c:06:fc:3c:90:41:
5e:ad:98:3c:d8:45:40:58:75:f8:54:a9:02:6e:d6:
ed:47:b7:fd:1d:a6:7f:39:8d:62:fa:7d:0e:f2:d3:
e6:85:3e:5c:42:2d:04:0c:24:7f:fb:dc:ee:5e:4d:
48:5a:6b:df:0c:3a:1a:f4:6c:1a:f7:b8:1e:28:29:
34:40:ba:24:be:e4:df:29:2a:f2:92:c0:43:20:8c:
0b:cf:09:61:d3:ef:48:ea:b3:fe:80:90:3f:ed:cd:
50:3d:68:54:7c:8a:e9:1a:81:e8:a5:d5:37:f7:ec:
1e:e3:15:9e:ef:1a:23:b7:99:1c:de:ac:ce:7c:b6:
69:c7:a9:50:d9:0b:e4:5f:15:fc:cb:3a:0e:85:ea:
4a:4e:0f:1b:a4:7d:d3:35:b5:76:66:ab:8e:8c:fd:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BA:54:40:14:66:F3:DD:23:5F:26:FB:66:63:03:E9:2C:0A:BE:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b76e7bf-bc0b-3329-8d15-6934fd4b00a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.91.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ff:5b:40:d3:e5:1f:0c:de:a1:7f:ba:cc:1d:f5:04:64:7b:
c0:ba:75:fe:40:40:13:e3:1c:77:d9:af:98:be:63:7f:a4:fb:
b0:ca:c6:2e:da:36:06:3b:da:4a:a5:49:f7:53:30:8a:9c:19:
88:8a:3f:c0:f3:6e:34:72:20:8d:25:62:f6:cc:34:21:ba:3e:
3a:b9:55:7b:6b:96:c8:55:b6:25:e1:51:cd:5e:44:75:28:12:
f0:1e:81:9c:cb:ca:c4:27:fb:a1:e4:9e:75:6d:0e:a4:51:23:
e6:3c:24:ad:f0:b7:3e:14:a3:1d:6d:13:0d:18:4b:97:d3:5b:
10:cf:27:d1:69:71:ae:72:28:c1:3d:ee:7c:cc:8e:7d:de:4c:
3a:59:ea:6b:2b:03:27:c0:40:08:c3:4a:89:0d:a7:11:37:e5:
18:f8:71:da:c5:cb:d0:5f:dc:69:01:44:76:63:cb:92:a7:fd:
a4:30:77:a5:a9:24:0d:24:cd:8a:94:c7:d3:a1:21:9d:95:82:
ec:37:76:89:10:9c:45:5c:99:6e:7c:46:45:e2:81:12:e7:be:
97:bc:28:2c:24:dd:ec:c4:ec:c9:59:0f:ce:0f:95:a7:b2:82:
bf:3c:8c:b8:2d:f1:74:13:4d:8e:b0:5a:42:d2:68:13:55:70:
6c:2f:4a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:42 2023 by rpki-client on console-fra.rpki-client.org