Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71ac7dd1-6318-3bf7-98f5-ac0e9f1a1a8a.roa
File: 71ac7dd1-6318-3bf7-98f5-ac0e9f1a1a8a.roa (raw, json)
Hash identifier: 0yJXFMkObJHdylCnwJYKij0qdEFJQuR6Q3J4mjsnmFI=
Subject key identifier: 2E:F4:D3:88:8D:89:13:8A:F5:1A:A1:B5:00:44:B5:B3:EA:F4:32:3F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A30278028572E8BFE7A216
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71ac7dd1-6318-3bf7-98f5-ac0e9f1a1a8a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.100.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:02:78:02:85:72:e8:bf:e7:a2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=dcb4cbc4-1dbd-431a-8cda-3efab09d6ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:7e:8d:24:08:ae:d3:91:68:5b:bd:56:8b:
10:7f:c4:52:96:35:3a:f1:be:22:9a:aa:cd:7f:ea:
cc:b0:59:de:18:4f:5c:65:ff:62:b4:dc:80:90:d9:
a8:45:7d:47:ad:81:14:66:c2:0c:1d:84:3c:e0:f3:
a7:98:69:a9:72:7b:d1:74:38:6c:e3:02:3f:82:b3:
9f:3d:e5:8e:f8:af:05:0d:80:65:ea:aa:2a:af:ad:
9e:ac:68:4b:f3:14:bc:c4:b6:21:4e:75:79:08:5c:
57:1c:cc:63:16:6e:02:01:d1:fc:af:d2:3f:77:bf:
c4:8c:2f:f3:38:d2:e1:c4:85:c8:dd:75:cb:63:23:
52:b2:ac:c8:64:96:6c:05:e9:f3:e0:91:ee:93:ab:
79:c5:83:62:27:80:2d:32:73:0b:9e:08:f5:c9:38:
f6:d1:a0:9c:1d:4e:52:8a:d5:07:07:2e:92:cf:8c:
bd:0a:4f:80:04:5e:60:b6:0d:6d:8a:40:4a:d2:7b:
47:68:3a:3c:d8:10:f9:a0:ea:75:d0:9a:08:30:5a:
34:04:de:a8:f1:25:d9:ff:fd:e0:1d:7c:52:af:83:
06:6a:b5:7c:f2:e3:d1:9a:58:98:61:77:2f:83:e5:
b3:af:9a:e2:bb:6b:dc:74:68:7b:40:97:92:4d:49:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:D3:88:8D:89:13:8A:F5:1A:A1:B5:00:44:B5:B3:EA:F4:32:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71ac7dd1-6318-3bf7-98f5-ac0e9f1a1a8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b6:2e:de:1c:79:50:f1:62:27:dd:7e:83:5e:5a:d4:92:bc:
62:be:bc:6b:9e:2a:11:64:22:d0:30:c7:cf:0a:1a:3f:c0:b5:
ef:0b:e4:a3:0a:ef:36:9e:95:45:13:c5:28:72:a2:22:d2:1a:
80:6d:9c:0b:50:84:e0:c0:bb:bd:7d:49:30:22:57:fe:98:c2:
7d:f7:fc:f2:d3:d8:e0:68:a3:01:96:0b:1d:31:1e:a7:0f:d7:
44:b7:c6:72:45:2e:a1:0a:99:7f:fd:1b:5b:dd:be:d3:71:4e:
bd:7a:cb:97:c8:e8:63:49:8f:3f:56:2c:45:bf:b9:db:78:b4:
18:65:a5:9b:59:55:25:cc:f3:23:59:fe:0a:d7:63:a0:ad:e3:
5d:c8:04:15:7d:28:fd:d6:af:51:28:b6:dc:f2:52:55:8c:85:
59:01:e6:c9:41:4f:b9:4e:6c:98:00:10:6d:b1:ad:83:2b:c3:
0b:7e:f5:db:bf:35:f7:d5:b8:b2:44:f8:90:39:27:ca:89:2a:
c8:d0:4a:8f:8d:01:62:6d:4a:e5:f4:34:52:cb:07:5f:e9:f5:
23:9f:7d:71:d5:b1:8b:13:58:c1:70:82:70:9a:71:53:e8:07:
c2:82:a4:14:81:ef:3e:b3:96:21:c8:43:29:8c:32:71:d1:7f:
dc:ab:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:43 2023 by rpki-client on console-fra.rpki-client.org