Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/661f2f25-7b20-3960-8749-72a1fa76ac2f.roa
File: 661f2f25-7b20-3960-8749-72a1fa76ac2f.roa (raw, json)
Hash identifier: jgte7jF5eGiD+PbEabFzUcdoCpsBYSgYmcrMkLNwt8o=
Subject key identifier: D9:84:34:7E:9A:7F:8B:F4:C7:B8:4D:AB:B9:4C:23:84:96:52:AB:F0
Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial: 010D0C9F4328583C04FFB37BB4A22BBFC7BFDBF0
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/661f2f25-7b20-3960-8749-72a1fa76ac2f.roa
Signing time: Sun 22 Aug 2021 04:00:00 +0000
ROA not before: Sun 22 Aug 2021 04:00:00 +0000
ROA not after: Mon 22 Aug 2022 04:00:00 +0000
asID: 54600
IP address blocks: 104.193.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:04:ff:b3:7b:b4:a2:2b:bf:c7:bf:db:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Validity
Not Before: Aug 22 04:00:00 2021 GMT
Not After : Aug 22 04:00:00 2022 GMT
Subject: CN=d94c9eb9-839e-4a95-b953-46689e4d4c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:25:96:38:e4:af:cd:db:e6:7c:48:00:3d:
9f:07:ab:10:13:69:e4:dd:71:24:cb:1f:9a:c3:49:
b2:62:8e:3f:43:9f:30:1f:5b:44:56:49:73:15:3d:
ff:6e:91:ea:6a:6b:14:e5:c5:99:2d:7a:e8:42:4a:
db:d2:f2:e8:ce:54:dc:74:7e:96:57:8e:43:c2:13:
0f:d1:4e:e4:c1:df:16:ec:bb:cc:c5:7b:de:20:27:
3e:ab:16:ac:28:b4:be:0f:00:82:54:5e:73:8a:77:
af:6e:2f:f0:58:af:ca:d4:07:a5:f2:e4:fb:2f:9c:
c4:65:0e:19:b5:f5:41:30:51:e4:f6:60:ab:6d:5a:
91:84:f6:95:37:94:86:7a:6c:4d:3f:d7:c6:c4:53:
2a:49:1c:08:b7:05:f8:23:c9:44:74:1a:c1:be:8d:
ab:2f:e2:db:39:06:e6:38:f2:4f:6e:86:59:2c:f5:
80:39:b2:e0:54:a2:99:ef:de:59:65:a8:08:8e:1c:
d8:5c:80:0c:ed:d3:04:78:9a:8f:62:88:8a:e7:90:
3a:f3:6c:94:43:97:91:96:48:de:45:72:e6:c9:de:
2c:5b:2b:fb:44:a5:a6:83:9a:9b:27:77:ad:8f:c5:
cb:c9:f6:db:7e:1f:53:e9:07:c1:25:3b:09:44:92:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:34:7E:9A:7F:8B:F4:C7:B8:4D:AB:B9:4C:23:84:96:52:AB:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/661f2f25-7b20-3960-8749-72a1fa76ac2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
X509v3 Authority Key Identifier:
keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.193.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:2a:78:4e:30:3b:9b:a1:6a:21:6e:58:33:a9:df:8c:a5:49:
c6:93:67:74:c9:23:f5:de:28:44:9f:b4:25:7e:85:d6:3e:b0:
f0:4e:fc:d1:e3:fa:3b:e1:c7:ff:f4:49:3f:52:af:8e:6b:ae:
ba:24:3b:87:27:7a:c5:de:3d:68:a2:1a:8f:92:fa:fc:0b:ec:
5d:95:8b:39:2d:f9:81:93:a7:65:8a:1e:6d:f9:4d:c5:d2:c6:
db:48:d1:1c:86:74:07:35:8d:3e:14:66:f4:0a:e9:15:ea:8b:
da:3e:9a:83:ae:b6:fc:39:6d:4f:af:44:d3:ab:95:e9:e1:3e:
f5:a0:c4:3b:c9:09:9b:54:2d:40:29:d6:ef:ac:be:8e:2b:4d:
bd:3c:d8:89:c6:1f:ca:13:56:e6:66:e3:70:a3:2c:50:45:c9:
e0:e6:57:35:65:92:f7:63:6a:8c:7b:3c:92:e0:a7:41:c9:3d:
ca:2b:82:d0:91:29:39:33:26:95:e8:1e:82:90:e8:1e:00:d2:
62:dc:40:f6:5c:ef:4d:96:bc:1a:75:10:ac:97:c3:7f:c8:29:
2b:44:ce:59:23:a9:d3:3e:08:88:dd:3d:84:91:ff:d1:78:1a:
77:ee:19:62:83:6a:2d:10:3a:81:9a:4c:88:d3:b9:4d:e7:6d:
be:41:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:41 2023 by rpki-client on console-fra.rpki-client.org