Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7148e1b-9a44-3401-9c54-7817df9ee762.roa
File: d7148e1b-9a44-3401-9c54-7817df9ee762.roa (raw, json)
Hash identifier: XEiunbEPMBZsH+p96rWVt4l6mxVC6u8xh5+0AfSBdYQ=
Subject key identifier: E8:AE:89:30:51:D5:7D:62:26:72:3E:1E:1A:C3:5F:61:1D:1B:23:28
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A4A03081688800D0BB0F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7148e1b-9a44-3401-9c54-7817df9ee762.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a4:a0:30:81:68:88:00:d0:bb:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=02d49d40-923b-449d-92e6-cbeca5498592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:67:cb:f7:17:aa:ba:75:5f:85:d2:42:df:
7c:a0:d0:25:3f:b1:43:76:44:c4:12:e7:c4:f5:77:
4f:71:19:ce:49:9a:ef:d3:7b:31:27:63:f6:63:53:
b7:65:da:8e:fb:92:af:1a:25:f2:6c:f8:56:76:76:
d4:2e:c7:52:17:17:18:a2:fa:47:15:49:13:97:be:
07:82:d3:40:07:92:41:b8:52:83:bb:8d:c7:36:39:
87:ac:02:02:95:eb:37:be:f3:fa:6c:1b:46:3a:64:
51:05:09:1e:86:64:1a:df:01:07:bd:83:31:ba:57:
b7:53:58:2d:07:01:28:3d:95:be:c0:4b:e7:41:f7:
65:e6:53:b6:41:81:f8:48:0d:37:98:24:38:55:95:
79:ee:8a:4c:f9:2f:9a:10:ea:a4:3e:6a:ae:c3:19:
3e:b4:61:ac:a0:27:9e:3b:7b:17:42:ba:45:d5:5e:
a8:0f:7c:95:87:c1:83:6f:24:1f:83:2d:d4:0d:5a:
69:ac:db:09:64:a2:1e:2a:2e:1f:2e:79:71:e3:5b:
bc:41:9f:f6:2c:ec:04:23:b0:76:6b:b0:a8:96:25:
2d:ff:75:f5:7d:fd:c4:34:0c:1e:c8:b7:c1:5b:4d:
03:83:c2:50:a4:f3:2a:52:b2:ad:8c:6b:75:9d:93:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:89:30:51:D5:7D:62:26:72:3E:1E:1A:C3:5F:61:1D:1B:23:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7148e1b-9a44-3401-9c54-7817df9ee762.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:5e:8a:93:db:c9:bf:68:6a:c0:e2:ac:ef:ef:a5:2e:9d:5a:
38:9f:73:cb:c5:6f:85:80:89:05:93:35:5a:e7:b8:9b:36:95:
30:04:67:17:17:8d:be:71:53:66:9c:d4:9d:e4:ac:41:19:d1:
15:03:18:88:77:05:d4:11:c6:b4:30:1a:05:4e:82:7c:a7:60:
61:92:33:c1:5c:4f:aa:86:fb:dc:0b:48:72:54:43:d3:3d:b3:
2d:09:ca:c4:57:e7:72:fc:e6:06:85:59:53:f2:73:01:ff:a9:
9b:b7:53:e4:fb:8f:e1:8b:40:80:b9:02:16:8e:14:45:61:36:
8d:48:78:93:6c:92:bd:dd:52:f1:88:7a:fb:b0:fa:21:79:2a:
22:af:7f:2b:33:dc:13:12:7d:6f:f1:24:64:60:8d:e0:79:7d:
6a:fb:bf:7c:5c:bc:cd:11:c5:b7:3c:94:07:70:13:0b:ef:44:
10:19:19:6e:dd:80:06:3c:86:c0:d7:94:4d:7a:29:02:dd:34:
ca:12:f5:b7:3f:dd:cf:ec:e8:59:a6:39:f3:15:c9:d5:27:65:
dc:c8:99:5e:08:58:29:8c:ef:d8:31:c9:7e:a1:eb:a5:e3:cf:
e1:3f:48:c3:15:d1:f9:03:60:d8:0f:a2:6d:51:68:62:2a:37:
bd:e3:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:46 2023 by rpki-client on console-fra.rpki-client.org