Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5f3820e-e5a0-3228-8f20-a19a98b9ed0e.roa
File: f5f3820e-e5a0-3228-8f20-a19a98b9ed0e.roa (raw, json)
Hash identifier: Iat+DOk8pgmpMckjB8dXE2SthrvJUdaM7B4YmVgxD4E=
Subject key identifier: 49:18:4B:1E:17:F1:D1:51:C5:E4:A1:F3:BB:02:BA:5A:B0:B7:93:44
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BA6D372AFFD67FF47E6F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5f3820e-e5a0-3228-8f20-a19a98b9ed0e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.78.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:6d:37:2a:ff:d6:7f:f4:7e:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8df7584c-959d-4527-adb9-70fd85a69e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7f:10:c0:38:2a:59:be:f4:82:8c:a1:ba:9e:
6a:bd:32:0a:ec:d9:0b:a8:de:30:73:58:cd:b6:a3:
14:b3:14:42:f2:53:07:3e:e9:a2:b2:e0:25:57:9d:
58:fa:02:3d:d1:8d:60:ed:51:3f:78:f1:f8:10:cd:
65:ea:8a:64:fc:7b:29:e2:6d:78:08:e4:56:42:05:
2a:07:a7:70:a0:2e:55:3a:a2:1a:4b:90:b5:19:0c:
c1:1b:d9:a1:70:55:cd:1b:45:55:19:af:83:96:1d:
ca:a5:bc:9d:72:6e:95:b4:9f:e4:e2:43:a7:07:9b:
c4:01:bf:b7:ca:0b:cc:b3:39:ee:72:9a:15:31:c9:
d0:ec:a5:86:57:3d:97:08:f7:59:1b:ff:87:97:7d:
4b:ba:d3:1b:44:23:1a:91:b7:a7:7f:3a:a6:b5:d0:
a7:1d:a1:69:6d:07:2b:1f:58:6b:3a:0f:fc:83:06:
a7:00:1b:ce:50:70:18:9b:cc:28:21:e6:12:d5:aa:
e9:35:b3:f0:dc:1d:30:3a:f2:ba:4b:7b:d4:45:5e:
23:96:67:08:de:a3:8a:29:98:08:a4:0e:28:cd:8d:
be:7a:8f:5d:ec:b8:d2:c7:c2:1e:a7:ba:bc:29:86:
45:c1:78:bd:9b:18:c5:5e:80:bc:5d:24:06:a0:0e:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:18:4B:1E:17:F1:D1:51:C5:E4:A1:F3:BB:02:BA:5A:B0:B7:93:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5f3820e-e5a0-3228-8f20-a19a98b9ed0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.78.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:c0:47:89:85:27:41:2e:e5:b0:0e:a4:c9:62:0b:a3:89:95:
08:b7:b7:6c:4e:b4:d4:02:ad:f6:94:3c:1c:c9:df:72:55:b8:
e4:fb:af:8a:e0:cd:76:2d:34:d0:ec:ba:02:47:7c:49:ba:e6:
28:f1:c0:b8:2c:50:32:56:1b:29:81:b8:57:2b:e8:e3:e3:4f:
5a:c3:65:dd:c8:82:e7:bc:44:27:4f:2e:70:72:89:83:49:df:
7a:90:54:10:58:62:cd:b3:c7:5d:cb:79:b2:7f:d1:31:cc:71:
70:fa:79:26:1f:85:6b:fe:2f:f6:f3:db:38:60:25:ed:5a:7f:
5a:24:dc:79:d4:a9:4a:42:f6:06:f9:88:27:9c:f4:e4:8e:9a:
c3:fa:6e:16:a3:b5:33:68:52:1f:61:f6:94:21:05:bc:88:35:
88:78:77:7a:79:26:47:a8:6d:f9:69:84:9d:ff:35:77:5d:31:
b5:9d:f6:81:d6:e3:0f:d0:e2:48:4b:f6:61:4f:96:a0:69:61:
47:5d:f3:62:b6:57:9e:f8:ba:d7:9b:fe:48:04:fb:b6:8a:50:
22:58:3d:2f:1b:b9:94:f2:10:c0:90:85:df:39:01:0a:8d:1d:
3c:ca:e5:37:90:f4:71:ee:56:46:23:ad:34:78:cf:d2:c8:e5:
8f:69:3b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:46 2023 by rpki-client on console-fra.rpki-client.org