Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85f5174d-cdfe-3ee4-82a6-60bd86aa9dcb.roa
File: 85f5174d-cdfe-3ee4-82a6-60bd86aa9dcb.roa (raw, json)
Hash identifier: 7SXmwesEJJn4QinK1G2/o+tgVlW69Y55bHAB0pPMIIM=
Subject key identifier: 71:65:64:D9:83:72:B3:D3:04:F7:40:AC:4A:60:F9:D2:D2:DB:43:0B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A2B00551F7F11DE581B2C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85f5174d-cdfe-3ee4-82a6-60bd86aa9dcb.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.137.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a2:b0:05:51:f7:f1:1d:e5:81:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b379b735-897a-457b-a3cc-af99fcbb6e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:8b:26:34:1c:82:fc:e5:73:5d:0e:6f:37:
99:e4:f5:7f:ea:28:4e:b5:ca:0c:c4:28:34:33:cd:
b7:28:88:47:81:b4:91:0a:07:fe:12:14:9c:6f:c9:
6f:40:cd:0f:ba:07:56:10:52:f8:20:d0:4a:ca:f2:
86:cd:bb:30:9d:d1:b9:1f:b2:49:1b:a6:30:61:fa:
b1:b3:4a:61:2f:91:5b:4b:61:94:bf:b0:d1:19:6a:
46:63:b6:94:ea:e1:30:fb:e7:30:4b:a7:0e:1f:d1:
31:f5:45:7b:62:2b:96:2d:0e:e1:fa:3d:42:83:c4:
08:0f:89:65:96:86:15:6d:a9:6a:1e:ae:aa:f3:da:
5b:6c:ba:8f:24:99:4d:6d:cd:cc:ca:e1:2d:43:41:
d7:6d:83:7f:96:b2:2b:c6:57:be:6f:2c:f3:2c:75:
f0:31:3f:c1:a0:e5:e3:f7:65:32:41:19:8c:18:e1:
61:19:02:ca:dc:5c:8e:a6:7b:72:e9:ab:b8:78:ca:
b3:1b:a4:72:b9:af:ec:d9:c5:53:01:2c:5a:a5:19:
de:fd:ac:2e:c7:3a:d0:49:15:d5:aa:9a:e6:bc:46:
58:63:e6:96:37:02:b7:61:57:e1:80:92:0e:cc:81:
d6:23:da:fa:fc:d4:a2:d0:d9:26:65:0e:e5:86:1d:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:65:64:D9:83:72:B3:D3:04:F7:40:AC:4A:60:F9:D2:D2:DB:43:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85f5174d-cdfe-3ee4-82a6-60bd86aa9dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:5e:2f:5f:c4:25:d5:fd:eb:d4:1b:90:40:13:1b:b3:8e:fb:
df:af:df:6c:75:bc:20:8c:23:2f:10:56:7e:da:a0:01:30:45:
fe:e1:c5:96:62:fe:f1:5d:39:6f:75:ba:d1:ae:a6:a4:76:75:
ff:b9:fb:fe:10:d8:93:03:cb:84:c9:41:ed:f7:30:f6:db:4f:
55:5b:5c:e5:4f:d5:fe:a2:2e:59:76:1a:22:0c:6c:db:31:07:
36:8b:23:9c:2b:39:a8:a6:80:a2:29:3c:32:5e:73:a1:d1:fc:
37:4a:43:21:d5:bd:23:d4:5d:1c:e1:27:8a:0e:5a:26:fc:df:
23:08:8d:eb:c7:19:ae:51:c2:3d:34:d9:aa:56:65:e3:5d:4c:
8d:95:49:8b:7a:fc:75:ba:64:c0:28:a8:c4:da:99:81:dc:c4:
60:69:49:cd:7a:f6:78:c3:13:8c:8b:5c:59:87:bb:60:ad:9b:
70:fd:6f:0d:9b:07:a0:d4:c8:94:06:33:0c:9b:e1:f6:69:56:
a7:ea:8a:0b:52:66:ee:96:84:50:66:0c:be:ea:8c:5d:c8:33:
4b:6a:8a:71:23:c9:75:1c:1a:cd:9b:ab:44:45:da:0d:e7:9e:
8e:23:a6:6e:0c:f9:62:43:13:ff:04:36:8c:68:c4:11:73:31:
8c:43:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:43 2023 by rpki-client on console-fra.rpki-client.org