Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/71bcd5cb-cb4b-3b97-8b77-a96e7c957994.roa
File: 71bcd5cb-cb4b-3b97-8b77-a96e7c957994.roa (raw, json)
Hash identifier: y4kum7o89WfmPPLcdiojUg/n+3mGLtETFCzOvqg9pGc=
Subject key identifier: F9:7F:72:A7:FB:0E:68:BE:E2:D1:55:5E:D0:7B:8E:FA:B7:36:76:6C
Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial: 010D0C9F4328583828912BA4254E477736F44680
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/71bcd5cb-cb4b-3b97-8b77-a96e7c957994.roa
Signing time: Tue 17 Nov 2020 05:00:00 +0000
ROA not before: Tue 17 Nov 2020 05:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 398852
IP address blocks: 104.243.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:28:91:2b:a4:25:4e:47:77:36:f4:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Validity
Not Before: Nov 17 05:00:00 2020 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=54195fdb-16a2-4fb8-85bd-9f10e791b3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:83:98:4c:cf:5c:da:e1:05:bc:29:f5:23:8f:
ca:ea:ba:17:e2:60:ba:a9:76:27:3c:0e:e1:95:d9:
11:88:a2:e4:7b:8c:c5:ef:41:9b:74:09:ac:f5:70:
4d:c8:b8:cf:e0:78:48:72:e5:68:af:59:cb:00:90:
b6:64:f4:be:35:a3:f5:ce:e9:92:94:2c:74:e6:30:
91:c5:7d:7e:39:1a:e0:77:75:58:1a:3d:c2:da:51:
c4:f4:b0:ef:23:89:54:9c:c8:79:81:e3:ba:25:d2:
0d:d9:58:15:92:84:8e:3d:36:37:0b:03:b1:cb:72:
ad:d3:1d:67:b8:64:6c:89:fd:d5:93:21:b7:be:20:
8d:d8:41:c5:04:af:f6:fe:46:55:ac:8a:97:8c:39:
9e:9f:e8:ec:74:cf:d1:a9:f9:a7:17:36:ce:fb:ea:
ae:ce:e5:09:8e:1b:0e:fa:85:7e:ef:65:26:41:52:
6d:41:6a:d8:7b:d6:32:17:c8:48:93:6b:f2:69:47:
2f:f3:24:33:2d:32:14:49:28:25:68:95:3d:a1:40:
aa:11:2a:28:68:bc:5b:c1:7c:2e:c4:1c:bc:a3:d3:
7b:6e:79:51:09:7e:8a:63:e5:a4:fb:04:2d:93:92:
bb:42:7d:01:9e:40:6a:56:34:91:12:dd:68:65:19:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:72:A7:FB:0E:68:BE:E2:D1:55:5E:D0:7B:8E:FA:B7:36:76:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/71bcd5cb-cb4b-3b97-8b77-a96e7c957994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
X509v3 Authority Key Identifier:
keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:26:04:14:a1:03:6f:a4:fc:4f:a0:74:37:a8:6b:ba:23:30:
f7:d3:ca:b8:fa:89:88:cc:70:15:f0:e5:8a:ec:12:63:f7:de:
b6:98:ac:8f:cb:74:cf:c4:58:91:71:41:40:11:d1:ab:91:8f:
96:f7:e5:85:d9:8c:c5:38:fd:13:6e:54:e8:a0:3d:db:09:dc:
cf:ee:cf:39:64:68:d6:06:0b:15:5e:5b:ab:64:7e:4c:5b:d0:
35:e9:4d:8b:17:68:b7:1d:cd:69:9f:56:64:9b:e0:48:60:7e:
a8:a9:4f:d9:ff:b8:dc:74:a0:18:d1:e7:f0:56:0b:c1:18:db:
18:d2:4a:8f:3a:50:f0:6c:00:01:9e:fc:ac:1b:99:74:61:3e:
2b:9a:35:a0:56:4d:be:f2:9f:32:7e:37:7e:8b:84:75:46:3d:
3d:25:1c:d1:23:cb:10:26:e2:8c:21:27:fb:71:86:a5:84:33:
c0:67:a4:c0:fe:19:db:35:ab:9a:4c:96:aa:7e:40:80:98:b1:
2a:8d:b3:1a:9b:6c:49:45:48:f5:03:09:da:7d:17:fe:5e:75:
fa:9d:b3:ad:3b:0f:24:aa:da:4a:bb:d0:d6:64:fc:f2:38:a0:
a3:a7:4c:4e:9a:07:a6:2a:17:44:79:5b:f5:f9:ab:87:09:bb:
b8:cc:68:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:25 2023 by rpki-client on console-ams.rpki-client.org