Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/aa21e10c-4672-31c6-977b-6a03b747f4d8.roa
File: aa21e10c-4672-31c6-977b-6a03b747f4d8.roa (raw, json)
Hash identifier: 2sk1QZhCfYjTnrte7uawTdHyPMtP/4EAIfE7K/VCICM=
Subject key identifier: 84:14:E8:4A:B6:0F:64:02:1E:FC:C5:5E:37:C8:80:89:2B:6E:FF:A6
Certificate issuer: /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Certificate serial: 010D0C9F43285841E46D695C7ED7DC25A690D880
Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/aa21e10c-4672-31c6-977b-6a03b747f4d8.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Wed 28 Jun 2023 13:20:05 +0000
asID: 31849
IP address blocks: 104.219.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6d:69:5c:7e:d7:dc:25:a6:90:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jun 28 13:20:05 2023 GMT
Subject: CN=36740443-4668-42e7-885c-2025e3f8359e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:d9:46:ee:26:80:29:76:cc:76:27:bb:90:
19:76:f7:ae:7d:a6:10:a8:b0:e1:29:a7:45:2b:b7:
d8:5e:62:28:50:9b:a8:bc:be:74:ca:a4:bd:a8:11:
9f:e6:ab:f6:ce:c7:64:9b:fc:13:7c:5f:01:c8:d8:
80:09:03:d0:a9:65:c8:de:a4:53:72:6b:40:c3:64:
c8:dd:7d:75:aa:82:bc:8f:0b:7e:66:0d:89:66:01:
88:47:f9:d4:78:d0:3f:4f:7c:2e:3c:01:08:aa:7b:
27:0e:a7:12:e9:63:77:99:e2:83:5e:95:d1:60:19:
a8:43:5f:8c:db:c2:87:fd:ff:78:1a:cc:25:20:fa:
6a:74:f9:10:5b:1d:f2:f2:36:0c:39:34:e6:62:6b:
a9:c4:9f:b2:af:37:db:8d:b3:88:44:f4:80:a9:c8:
7f:9e:61:7f:59:cc:93:f6:40:4e:49:65:84:94:b9:
a5:ed:83:9b:e6:79:c3:c5:56:5a:1f:b7:2e:51:25:
8f:cd:85:d8:ea:ed:42:73:ba:ec:cc:0e:27:ff:b9:
ed:f7:0f:c0:bf:1a:70:31:3a:84:e2:4c:08:a7:dc:
ab:72:84:2f:ca:0f:a4:a6:7a:11:b6:af:df:37:5a:
6a:ff:2b:fb:bf:eb:04:e6:44:56:14:0e:e0:99:37:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:E8:4A:B6:0F:64:02:1E:FC:C5:5E:37:C8:80:89:2B:6E:FF:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/aa21e10c-4672-31c6-977b-6a03b747f4d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl
X509v3 Authority Key Identifier:
keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:82:ca:9e:36:bb:89:69:81:a8:12:90:7b:d4:23:04:e0:32:
1e:8e:bb:52:2a:e5:2b:d1:73:43:b6:fb:55:e3:20:6c:30:89:
fc:8b:ce:b2:4c:d5:38:71:0d:8a:f8:c0:2f:63:2d:5f:1c:2f:
3d:51:12:fd:43:8f:e4:79:3e:13:0b:7f:c5:28:49:74:10:3f:
e0:f0:45:dc:5d:d2:10:c3:46:c3:0d:0a:12:6c:3b:69:81:36:
5b:55:82:16:57:43:df:f6:9e:a1:6a:06:2b:ca:08:85:a8:a7:
15:ce:94:58:5e:62:08:21:65:34:65:9f:76:56:b6:7d:78:33:
17:6c:d4:02:a5:50:c4:91:30:18:c6:0d:b2:19:e1:0c:65:b4:
88:24:03:3c:87:3b:15:4d:28:a6:d9:2e:86:98:03:81:a6:64:
1f:97:2c:46:a2:64:eb:f4:d0:6e:28:2c:cd:a9:b8:f2:c5:13:
3f:0d:c8:39:07:b7:92:66:1a:24:3e:5f:0d:91:6c:d6:fd:1d:
92:b5:88:e3:9d:b4:b2:3c:08:c1:9a:db:7f:4c:d0:f5:54:60:
bc:bd:18:d8:19:d6:04:77:dc:38:28:55:c6:48:3d:3e:54:6e:
52:d7:da:ab:d8:02:4e:e0:79:ef:ae:08:55:b3:b2:2e:60:50:
52:6c:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:42 2023 by rpki-client on console-fra.rpki-client.org