Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfda43d3-2049-3074-93fa-854456239d9e.roa
File: cfda43d3-2049-3074-93fa-854456239d9e.roa (raw, json)
Hash identifier: NKJ8FeUbW/RqgwHd+It4lOHaeT0ej7lIEoT85/2xWDY=
Subject key identifier: 73:A3:57:9F:E0:4B:EB:1A:D4:4C:E7:A1:95:15:B9:8B:85:42:4C:E6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B4CEA34F119D5CC0EA7A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfda43d3-2049-3074-93fa-854456239d9e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:ce:a3:4f:11:9d:5c:c0:ea:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=10d10167-c63e-4dac-bcd3-57fa0805dc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c1:b8:33:66:73:f9:88:26:4b:30:fb:a3:8f:
53:b3:a5:b6:4e:81:11:d7:2f:1e:23:ae:c9:99:e9:
55:bb:bc:c1:65:db:67:0a:54:c3:00:3d:eb:3d:a7:
46:67:66:be:88:50:69:25:2a:02:0c:e7:43:6f:0b:
29:04:f7:2b:03:c3:4e:a5:70:3b:c4:4f:f1:85:db:
34:25:47:ef:c8:9f:05:2f:e5:8f:30:79:5d:c4:90:
56:fe:3d:ab:e9:de:42:5c:da:91:85:4e:76:69:52:
25:71:bb:2b:67:13:f4:95:7a:07:62:a1:44:61:2f:
25:d3:d2:be:44:b8:dc:2e:0e:32:18:16:25:52:0a:
b1:f0:d4:16:8b:95:cd:c0:03:ae:90:36:bd:01:47:
cd:7d:28:2a:ec:58:c2:84:9f:26:df:14:10:22:bf:
51:ea:84:cb:ae:e2:b9:a3:d9:7f:d0:9f:ec:7a:b5:
13:44:1f:72:89:cf:e0:af:5f:c8:80:b5:e1:2d:9e:
7b:bc:4f:47:57:db:e2:a5:aa:32:a7:01:32:be:dc:
f0:ec:86:77:46:cb:c3:6e:e5:97:b9:37:b5:7f:96:
da:db:54:1c:b1:89:75:b6:dc:8a:0a:69:32:4f:22:
f7:fc:d1:c1:7a:d7:5c:de:ed:26:d4:28:da:fd:91:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:57:9F:E0:4B:EB:1A:D4:4C:E7:A1:95:15:B9:8B:85:42:4C:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfda43d3-2049-3074-93fa-854456239d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:80:bf:98:d7:03:91:91:c8:83:7f:6d:00:c3:94:69:49:36:
5f:dc:64:e8:7e:79:e1:3d:00:d0:42:67:58:ed:b9:c8:cb:b7:
b6:2e:b8:c8:88:bf:89:4a:7c:fa:eb:a2:e0:99:9a:69:47:39:
a1:fe:ec:5a:d7:42:2f:39:53:1b:5a:de:1c:f4:60:bc:e8:ea:
5a:c6:fe:65:4d:84:fd:90:07:a8:65:a9:23:6a:f0:97:99:6f:
46:37:fa:a6:a2:d7:45:63:f1:77:57:24:7e:34:bd:76:51:86:
3c:5b:ac:25:42:17:55:ce:bf:07:be:d6:fa:b1:96:c4:47:e8:
4c:3b:e7:6a:60:9a:09:dc:01:81:d0:f9:51:b6:9b:47:b6:f1:
e6:fe:62:b5:ba:a7:8c:df:d3:2f:db:08:ed:4e:5c:87:7f:14:
c4:07:46:64:e5:01:a4:ad:a2:5c:4e:8c:94:e9:79:03:58:c5:
5d:a2:ff:e8:c1:c8:ff:cb:d5:a8:fb:9b:bc:de:1e:5a:8c:83:
0b:5f:b3:db:c8:8a:ce:1a:87:5c:68:79:8c:6e:28:5f:83:7d:
eb:c2:f0:17:f4:59:3b:cb:e2:27:27:51:e7:9c:3c:4a:f9:e5:
f5:ce:fc:19:a9:b9:4e:a6:1f:39:f7:0c:a2:51:12:ee:d1:d8:
9c:89:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:14:45 2025 by rpki-client