Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/40e0d77c-ee27-3be7-8288-63da6be4b7bf.roa
File: 40e0d77c-ee27-3be7-8288-63da6be4b7bf.roa (raw, json)
Hash identifier: t8d9RSM1XhGG/4qUM1Fa1a+JHbLGqdGWz89ujkp3BxU=
Subject key identifier: FE:A4:EC:09:2C:7D:E8:99:C9:DA:74:8D:C7:14:9C:28:52:EA:3E:32
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F4328583BFB8602FBC458BE5844155900
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/40e0d77c-ee27-3be7-8288-63da6be4b7bf.roa
Signing time: Wed 26 May 2021 04:00:00 +0000
ROA not before: Wed 26 May 2021 04:00:00 +0000
ROA not after: Thu 22 Feb 2024 05:00:00 +0000
asID: 19905
IP address blocks: 103.204.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fb:86:02:fb:c4:58:be:58:44:15:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: May 26 04:00:00 2021 GMT
Not After : Feb 22 05:00:00 2024 GMT
Subject: CN=005cd9ba-7a38-417c-938d-76877989888e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:b6:4d:42:2f:88:ab:92:0a:3d:ae:7d:a0:
15:78:1b:da:47:4e:e0:e9:73:4a:10:c5:fd:23:30:
35:10:d5:75:b6:b7:bf:2c:5d:87:ee:d1:b1:75:17:
35:30:2c:ca:95:d6:e3:4f:b2:4f:80:21:6c:7f:2a:
b3:76:01:32:37:67:99:95:43:41:2b:2b:97:c1:5d:
dc:1b:a6:01:3b:db:8d:84:37:c5:79:1d:85:0b:76:
d3:8a:37:1b:d5:06:dd:23:66:38:19:44:cd:17:76:
37:6e:70:47:7b:f0:b3:7e:61:78:34:4b:0d:25:ab:
11:0f:37:be:6e:ec:df:3e:ff:95:e6:d7:ee:22:9f:
2a:11:a8:f6:4a:fb:e5:22:44:4e:9b:3b:9f:e1:c4:
a5:03:42:71:b7:78:90:ce:15:2d:fa:4e:79:81:03:
2e:47:f3:5a:7d:87:0e:0a:db:01:3a:e1:fc:38:bb:
06:76:c5:b4:f4:68:0e:cc:8b:cc:f7:a5:3b:10:80:
52:51:aa:06:1a:19:ac:6b:66:9e:b0:d4:f4:4d:c4:
29:46:cf:11:e1:13:ad:68:57:93:12:d6:aa:54:e4:
3f:70:88:7d:7f:8b:88:59:60:f2:1f:2e:75:b1:91:
f6:1a:a6:56:13:25:5d:4d:40:67:a4:53:e8:a0:87:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A4:EC:09:2C:7D:E8:99:C9:DA:74:8D:C7:14:9C:28:52:EA:3E:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/40e0d77c-ee27-3be7-8288-63da6be4b7bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
103.204.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:9a:d9:f7:4b:e7:27:4a:d6:84:60:3b:f1:f7:88:77:07:e0:
f1:58:64:c5:96:09:cc:a7:82:8b:17:26:6f:0d:2b:bb:3d:1a:
82:43:51:86:d0:8a:18:df:fe:48:27:6f:0b:dc:b3:56:e9:0c:
ec:26:e8:6f:e7:a6:f9:2e:60:e6:c1:76:d8:43:74:7b:46:55:
bf:62:89:05:9f:e5:d8:cc:ba:d8:44:e6:7c:68:8a:39:e9:80:
b2:b6:e8:b5:bf:bf:5f:d5:ef:a6:be:f5:b1:22:f6:a0:83:17:
11:c5:62:4f:c3:c1:f0:54:2a:c1:99:74:7f:9c:51:42:fd:cd:
81:ef:fc:05:15:57:8f:52:5a:ab:05:fb:6b:ab:94:09:bb:2f:
4e:7d:32:dc:4f:da:b6:b7:1c:c2:72:7e:f2:15:54:5b:45:32:
2a:50:d2:04:5c:62:8d:f9:ca:2c:36:f3:a9:8f:41:b8:53:cf:
49:50:78:42:05:31:2b:25:63:f7:59:98:33:b8:a4:5c:0b:db:
0d:05:20:5a:0b:7e:ea:fe:f5:35:b3:25:d9:21:d2:82:00:81:
f5:87:e0:9c:93:49:3c:44:ee:30:c1:d4:74:2a:b4:4b:bf:4a:
14:3b:95:16:50:e0:f1:8b:3a:31:b8:1d:29:50:be:80:4d:86:
c0:70:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 07:23:39 2024 by rpki-client on console-ams.rpki-client.org