Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3f51de0-204a-3131-9279-d8d81737ac54.roa
File: f3f51de0-204a-3131-9279-d8d81737ac54.roa (raw, json)
Hash identifier: EUHZc51fOViA6L5z327iTcoQwc7bjcGgz7h8/zD4F2A=
Subject key identifier: E0:7B:51:35:B4:68:D2:70:2E:A3:5D:3E:DF:F9:AF:DF:1C:4C:2C:88
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BB85049C14107D3C0C4500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3f51de0-204a-3131-9279-d8d81737ac54.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.72.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bb:85:04:9c:14:10:7d:3c:0c:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9fb2c97a-ace2-445c-9b35-15449d2b0540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:99:3b:9a:df:16:92:d7:58:09:09:0d:27:95:
62:09:d2:53:45:8a:1f:f2:ce:d5:87:ca:66:d0:fd:
d6:c7:4e:d4:09:c2:31:65:10:9f:10:b0:5a:a1:fe:
92:00:85:96:16:d3:b1:c5:ce:9f:d2:6f:65:33:6b:
71:a2:b8:d5:8a:44:bb:67:a4:68:56:b3:2e:6d:53:
6b:01:46:7c:ad:bb:42:16:be:c3:b0:3d:3a:8d:cc:
7e:89:1b:6f:a5:9e:8f:5e:80:58:55:df:1e:d6:35:
f9:7f:5e:5a:c5:be:dd:59:4f:b4:06:a6:2d:ae:6c:
fb:70:a7:55:b8:2d:6b:ae:08:d7:52:13:75:6e:44:
e2:5c:be:eb:87:1e:5a:81:09:07:fb:e4:1c:22:fe:
d3:9a:93:b1:50:36:3e:58:a2:34:f1:cf:96:5f:44:
b1:b5:bd:3a:d4:52:61:24:61:1c:2e:76:63:ed:cc:
a3:6e:b2:6c:ea:cb:76:53:60:e7:ed:6e:41:89:86:
74:2d:cb:2e:5c:ac:f6:5d:a6:f5:3c:5c:10:cf:3e:
de:7a:b8:2e:58:04:36:31:5a:30:49:f5:94:cb:0e:
d3:ec:72:be:dd:b3:19:9b:e5:c3:68:05:d4:9f:c3:
8b:a7:df:17:6b:58:1e:72:34:a7:16:50:30:46:90:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7B:51:35:B4:68:D2:70:2E:A3:5D:3E:DF:F9:AF:DF:1C:4C:2C:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3f51de0-204a-3131-9279-d8d81737ac54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:b2:8f:c3:ad:7b:06:01:5c:d3:3c:8e:6a:85:b1:a1:aa:be:
57:46:fc:87:42:2e:1c:6a:46:2f:f8:10:89:7d:b1:70:93:34:
c8:70:47:71:cf:98:93:f0:3d:b9:e6:6c:d3:36:cf:05:a2:0c:
5d:ef:32:fe:8d:42:e9:6d:f5:29:0a:fb:07:e7:d8:b2:88:0c:
69:fa:3d:6b:f4:67:8c:e6:3c:66:02:b4:1b:5e:74:c6:fb:83:
79:9b:a8:0b:7b:8e:f5:4b:c4:67:2b:90:f4:34:4f:fe:fc:70:
c1:a2:95:23:89:a1:08:40:3c:2a:04:dc:bf:c5:93:b1:64:d9:
38:f4:fc:e7:d6:5b:ef:2d:7a:12:49:34:f0:40:d3:97:2c:d7:
e7:2c:ce:1f:6b:10:52:49:fc:d5:12:c6:e1:84:2e:fa:72:c1:
6a:1a:8e:ff:dc:6a:e5:8f:c0:8a:5f:d7:17:bc:96:4e:82:97:
b0:cf:e3:6e:9c:3e:37:f1:55:e4:1f:af:bf:53:04:06:66:7b:
48:69:ae:78:cd:8b:d9:3c:a0:f2:1c:54:10:b5:32:8c:fc:52:
86:46:5d:a2:72:98:ff:22:03:ab:30:2f:a0:08:b1:55:c9:8c:
c3:c8:d9:f5:a8:fb:39:47:dc:b4:56:3a:cf:d9:dc:77:84:e7:
7b:69:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:46 2023 by rpki-client on console-fra.rpki-client.org