Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60aa0ac3-9e24-3d5d-861b-725328a1d3fb.roa
File: 60aa0ac3-9e24-3d5d-861b-725328a1d3fb.roa (raw, json)
Hash identifier: N2f5VWCDEoa415sPZqfa0j6lEUqAXPpxIucLPrU4znI=
Subject key identifier: E1:32:6B:E1:DB:5B:80:42:57:CA:76:D7:3C:09:3F:B5:46:6F:5B:32
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B8038BD6BE96D6A8F9C5C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60aa0ac3-9e24-3d5d-861b-725328a1d3fb.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.136.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b8:03:8b:d6:be:96:d6:a8:f9:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f395f7cd-024b-4b50-a329-da79a9480b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:c2:bd:97:83:b5:6d:bb:91:46:f7:4b:e9:
aa:8f:22:e6:7c:7a:d1:ad:31:de:f4:1e:56:b2:9a:
06:66:be:91:06:83:4a:cd:bd:f4:31:3c:98:cf:b5:
f0:4e:a7:ed:25:13:8b:f0:d3:56:f0:26:a7:89:f6:
5c:4c:87:7e:31:3a:60:97:cd:5f:5f:87:5e:2d:92:
81:31:fe:7e:1e:23:6a:aa:4e:eb:20:25:ed:39:51:
4e:8e:fe:35:df:84:cc:c0:fe:df:45:3f:93:29:28:
e3:e7:62:61:8f:3d:c1:e7:74:7a:a3:4f:07:58:bd:
35:ff:58:5c:e5:73:85:d7:fb:3b:01:9a:db:fe:c7:
f6:56:de:60:10:75:b6:b4:f3:97:be:e6:99:37:22:
8f:fa:df:9d:1e:51:a0:95:3d:6f:af:7c:57:d4:31:
60:dd:dc:3c:b3:38:dd:ff:0f:8d:85:92:be:8f:9f:
e7:ca:15:f1:70:8e:1d:aa:fc:6d:3f:eb:9b:67:77:
49:da:ad:15:49:f2:2b:8b:f2:ef:69:8a:38:21:a4:
89:2a:8c:b4:62:0b:f3:ff:f6:e7:cc:a5:bc:96:91:
90:8a:be:5e:f8:c3:ad:84:6b:4a:24:5a:44:0c:1c:
86:ef:22:9e:30:40:ec:cd:c0:cd:7c:f7:b9:ed:e0:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:32:6B:E1:DB:5B:80:42:57:CA:76:D7:3C:09:3F:B5:46:6F:5B:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60aa0ac3-9e24-3d5d-861b-725328a1d3fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.136.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:da:86:7f:10:dd:eb:53:ec:e7:6c:f3:68:43:0a:ea:ea:c8:
2a:72:91:9e:fc:31:0a:ba:c8:8c:9f:e7:f9:48:3a:15:2d:6c:
74:d5:d8:ca:b4:51:85:a8:9b:71:0b:05:81:f8:f2:53:16:11:
0a:49:f7:bb:f7:8d:a9:1c:b9:43:c8:2b:74:50:41:48:98:fe:
77:0e:79:25:f4:3e:2f:15:c9:d7:28:1c:78:07:e4:a5:fd:00:
45:77:e7:08:0e:e1:1e:59:a2:79:bc:36:5d:04:78:ca:af:12:
a1:32:aa:5c:03:e9:81:a5:b5:10:3f:8d:4e:72:2f:cc:c3:ff:
d4:58:1f:cc:b5:32:e2:82:ae:80:53:44:fc:33:1f:68:ea:75:
73:84:b8:a1:29:7f:70:b9:56:09:ee:ad:33:aa:bf:71:33:60:
51:95:b6:af:42:f1:ec:41:af:46:2e:96:69:a6:a7:6f:86:15:
a3:c6:2e:6c:26:d0:13:57:e3:9e:6b:6e:a4:b3:fe:2b:c9:73:
c8:8e:f6:5e:0d:43:9c:9d:59:12:c9:57:82:cf:fc:8a:e5:74:
48:6f:a5:a0:fe:cc:c6:c3:c0:0b:c3:93:34:2d:f4:47:b4:b7:
76:6d:3a:cb:cc:3d:c1:5e:15:92:57:01:9d:d9:94:44:8b:8e:
5b:76:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:42 2023 by rpki-client on console-fra.rpki-client.org