Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea9c2682-1d83-3a0c-a06e-45a69dc318d9.roa
File: ea9c2682-1d83-3a0c-a06e-45a69dc318d9.roa (raw, json)
Hash identifier: Nfnc81PUrFm+D8M1PdsFWWf7gq5P+Byf0rSgMzIRqIo=
Subject key identifier: C7:92:01:BD:04:97:3C:88:42:DB:58:53:4B:64:04:92:78:6B:82:3B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A7509453A07CC74E271F60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea9c2682-1d83-3a0c-a06e-45a69dc318d9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.99.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a7:50:94:53:a0:7c:c7:4e:27:1f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e594e41c-475a-4968-9100-e7a166c1b6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:2a:29:18:a5:e6:a3:ff:e0:24:3d:08:51:
34:45:07:48:21:c5:df:0e:84:12:9c:16:8e:82:7a:
c3:0c:af:eb:94:89:06:4a:2a:1e:3f:5b:fc:cf:8b:
89:e2:3a:ba:35:a9:67:05:7f:42:07:d7:f4:71:dd:
7e:d6:5b:27:08:a6:7b:81:0c:a7:d9:ef:07:e3:bf:
18:c2:fb:c1:cc:05:f3:78:c2:44:3f:01:ef:73:bb:
4f:f7:88:cd:6a:52:0d:33:7f:1e:2d:17:5f:bb:b6:
8a:69:87:2b:7e:df:43:49:7c:48:26:25:dd:d9:22:
d5:3b:90:c9:43:19:e4:63:61:9f:9f:93:fc:82:e1:
9a:1a:82:14:fe:c3:f3:4d:3b:f3:72:72:ab:04:c5:
b9:3a:f9:d1:a7:50:b8:15:cb:40:ec:b2:89:a4:66:
3b:3a:0a:fe:9c:65:a0:d0:be:32:e3:21:0c:a5:68:
51:ef:c0:3e:9f:b6:46:f0:91:40:50:d8:93:b9:db:
1a:75:47:9f:46:25:ee:05:53:7e:f8:1e:76:86:35:
9a:ab:d0:57:65:73:37:1b:b8:21:f6:2c:d7:e4:72:
51:f9:c9:cc:08:4c:e9:0a:11:b5:84:80:ba:1d:6d:
d7:22:d9:92:e4:a5:8b:51:59:55:33:87:40:93:09:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:01:BD:04:97:3C:88:42:DB:58:53:4B:64:04:92:78:6B:82:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea9c2682-1d83-3a0c-a06e-45a69dc318d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e7:1d:a5:9f:da:55:44:eb:fb:3b:b0:05:6b:8a:7f:e8:0e:
33:6f:f6:45:ba:6a:4e:ee:7c:22:c5:42:fd:20:64:69:8c:0d:
c2:61:cb:b8:87:5f:6e:3d:7d:70:35:63:c7:fa:80:47:88:55:
b0:ae:93:29:ba:48:5e:fc:b3:98:0d:ba:6c:a8:46:fd:78:5c:
be:7f:e7:12:ff:ba:18:e0:4e:f0:1b:42:39:cf:78:92:62:bf:
df:29:0f:2f:06:7f:22:d5:5d:3b:35:a4:54:e9:6d:f1:8e:56:
57:dd:f5:ce:42:0e:06:f2:ce:30:98:4a:aa:dc:dc:45:5e:74:
15:aa:fb:83:a6:04:5a:9c:a6:f1:cc:cf:40:b8:e3:a9:e0:ce:
75:51:04:79:6d:16:28:98:bc:44:56:5a:08:19:aa:5d:94:6d:
45:66:d7:51:f9:8d:25:20:56:bb:57:12:b9:d5:83:30:7a:94:
0b:11:62:3e:4c:1c:f6:aa:3c:1e:1c:6c:24:1a:8c:30:84:35:
2b:d7:ba:4a:a0:e9:50:f5:e7:28:99:c0:cf:4e:d7:55:ec:a6:
70:58:c3:4f:9f:ba:77:05:47:43:d8:4c:47:fc:c3:7e:5b:a2:
96:6c:31:c3:10:9b:53:22:9a:d3:d7:81:1d:51:9d:4e:b2:20:
88:42:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:46 2023 by rpki-client on console-fra.rpki-client.org