Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/81ac94ca-b9c4-3ea5-aaac-03aee152898e.roa
File: 81ac94ca-b9c4-3ea5-aaac-03aee152898e.roa (raw, json)
Hash identifier: 70o+L4yAl8NMJUMR44YFf3oR6y6mRYRnEFQv+640zn0=
Subject key identifier: E7:DF:89:FD:9E:6B:02:22:5C:5D:F9:12:F6:AA:81:41:51:2C:B3:B2
Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial: 010D0C9F43285839954EC8504D3FC6F0531C8C40
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/81ac94ca-b9c4-3ea5-aaac-03aee152898e.roa
Signing time: Thu 08 Apr 2021 04:00:00 +0000
ROA not before: Thu 08 Apr 2021 04:00:00 +0000
ROA not after: Mon 17 Jul 2023 04:00:00 +0000
asID: 1239
IP address blocks: 104.249.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:95:4e:c8:50:4d:3f:c6:f0:53:1c:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
Validity
Not Before: Apr 8 04:00:00 2021 GMT
Not After : Jul 17 04:00:00 2023 GMT
Subject: CN=4f6d3cf1-2f62-4917-8e45-082939a8268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:22:29:09:e1:5d:2f:48:fe:08:bb:e1:1b:
6c:fe:fa:9a:4a:0b:32:9c:a7:99:a1:01:40:69:06:
13:47:0e:60:57:ad:c4:89:50:78:57:89:d3:5d:d1:
b2:75:8c:ff:b1:56:a2:a2:06:38:a4:b8:13:7b:df:
b9:b0:48:65:8b:46:04:5e:78:1f:3c:45:6c:22:9f:
28:79:b7:d4:80:b0:b5:36:b7:98:30:ac:b3:83:0e:
26:13:e2:12:22:fe:a2:90:a3:03:88:0f:ad:e6:26:
46:c3:af:ac:0a:bd:41:13:49:d3:43:61:b0:bd:cd:
c8:25:4f:28:36:30:c9:a5:f7:a5:a9:4d:cd:61:72:
1f:df:94:c2:bb:c9:ea:c7:8d:66:fb:35:63:f2:2c:
de:1a:22:86:3c:e3:b6:a5:bb:95:80:6d:95:19:60:
bd:fb:bb:1a:4d:e7:63:98:d3:0e:22:83:65:a6:c9:
59:68:bf:1e:59:45:de:ad:41:5f:a7:31:a2:3e:4f:
df:15:9c:ea:49:d0:11:35:ee:ea:7f:b5:5e:c2:b9:
cb:3b:cd:6d:36:69:33:a6:97:70:df:47:3f:7f:ff:
95:aa:24:1c:b6:80:83:52:5a:6b:2c:a9:86:01:a7:
c9:e3:74:e3:09:c6:df:cb:0a:ec:2b:f7:89:0b:a8:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DF:89:FD:9E:6B:02:22:5C:5D:F9:12:F6:AA:81:41:51:2C:B3:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/81ac94ca-b9c4-3ea5-aaac-03aee152898e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
X509v3 Authority Key Identifier:
keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:d8:61:87:dc:c2:33:74:19:b8:1b:7d:b6:73:70:9b:d5:7f:
07:0f:f9:4b:18:cb:2b:08:81:0e:7a:36:67:90:91:2d:76:96:
6b:00:43:46:36:7a:d7:30:fd:8c:0c:66:13:73:c2:a9:d3:db:
f9:98:4a:73:e0:a2:99:f2:b4:df:9b:ad:ac:ce:67:1c:eb:fe:
f1:8f:82:ef:6d:d7:d0:3a:1e:21:3b:21:04:ea:c4:62:2c:3d:
33:c0:55:e1:a5:84:27:8a:43:57:7d:96:f6:78:e1:22:de:06:
46:30:7d:e6:61:c9:d7:13:c3:b1:5a:aa:6a:18:66:95:a3:5a:
ec:90:21:2d:d8:c0:85:ae:56:91:db:cb:79:27:7f:d7:6b:02:
6e:e4:0a:1a:9e:20:25:ff:36:ac:8c:eb:c0:98:b8:cc:0d:27:
09:4e:6a:5b:09:9b:69:e4:3a:c5:b3:5a:79:01:bd:07:6e:f0:
e0:3e:cc:07:e8:e0:60:26:cb:3e:d4:eb:5d:ef:1e:cc:c3:c2:
3b:96:1c:98:3d:33:79:63:17:a6:19:e8:a3:27:58:0e:d0:3a:
0d:15:dd:8c:06:88:4c:60:85:7b:cf:ac:a0:61:20:52:23:85:
6f:98:bc:de:2d:61:f3:2c:cd:f0:21:a4:72:80:74:24:36:d1:
4a:70:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:43 2023 by rpki-client on console-fra.rpki-client.org