Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a39a0b91-8787-39ab-916e-15e4fd592e37.roa
File: a39a0b91-8787-39ab-916e-15e4fd592e37.roa (raw, json)
Hash identifier: Fnt9e9YtK75ffdfOwkPgDzMobCYdKfwsSJjIsjd1LOw=
Subject key identifier: 0A:F5:11:D4:CC:7A:E8:92:77:1A:72:8C:44:47:86:FC:AC:7E:76:6D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285846C9ED9069D85AA6301EE2E280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a39a0b91-8787-39ab-916e-15e4fd592e37.roa
Signing time: Mon 05 Aug 2024 12:00:00 +0000
ROA not before: Mon 05 Aug 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 104.30.136.0/24 maxlen: 24
104.30.137.0/24 maxlen: 24
162.159.207.0/24 maxlen: 24
172.64.230.0/24 maxlen: 24
2606:4700:48::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c9:ed:90:69:d8:5a:a6:30:1e:e2:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 5 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=f82ea2f2-f4fc-4653-9d0f-387c7ade2ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:ea:a7:21:0a:20:8f:51:bb:ed:bd:cf:2c:
ff:9f:93:5e:e8:02:49:65:ac:7b:e4:f4:6d:a6:f4:
72:ac:fb:e5:33:67:a8:6b:88:48:32:ef:bf:ee:41:
f3:7b:d7:c2:21:2c:10:4f:52:39:0b:1f:6b:23:57:
a6:66:ef:7a:23:f7:28:ab:12:e8:e5:27:22:86:f2:
69:f1:3d:13:06:20:0a:60:ab:53:31:30:8d:ab:b0:
9f:63:48:7f:8b:55:61:03:16:4b:76:00:08:60:48:
a6:46:27:8b:d3:4e:63:47:18:7e:b5:63:21:c8:d0:
bf:00:4f:a9:b3:d3:db:fc:11:4b:e1:f0:5c:e5:91:
75:03:eb:ed:7f:d8:72:48:73:e6:61:0f:30:23:5b:
b3:1e:95:e7:09:f8:08:ff:d9:d3:d3:9a:11:a6:49:
03:f1:fe:8a:5b:90:de:e5:1e:75:7d:2a:58:3f:f8:
1f:57:77:44:44:d7:0a:f3:3a:ff:55:c4:c6:67:f7:
8f:25:2a:c2:6d:ae:c1:be:b2:ec:cc:0c:cb:d0:95:
a5:f2:4b:e9:fa:1d:33:cb:67:48:7d:9a:17:ac:2d:
ef:ea:ab:5e:1c:2b:b0:72:e5:6c:c7:93:fb:8d:3d:
6f:72:06:6d:26:44:f9:25:d9:75:18:fc:52:e3:a1:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F5:11:D4:CC:7A:E8:92:77:1A:72:8C:44:47:86:FC:AC:7E:76:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a39a0b91-8787-39ab-916e-15e4fd592e37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.136.0/23
162.159.207.0/24
172.64.230.0/24
IPv6:
2606:4700:48::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:aa:8e:2b:2c:8e:9d:cc:28:61:a9:f8:10:41:e8:bb:6a:73:
13:3c:d9:08:06:ff:6e:a8:de:a9:48:b8:13:43:ce:d9:eb:f8:
e9:23:0f:30:42:67:9e:26:2a:84:c4:b4:35:7a:7c:6c:44:9f:
bf:37:7f:94:2c:bb:c2:88:cd:f3:55:cf:ac:5a:59:5c:68:1a:
ef:cf:b5:49:9d:3d:fe:e8:84:ca:76:23:75:a6:20:65:2b:08:
b3:80:66:64:da:a3:1f:61:d8:9f:f3:9d:26:47:ce:37:1c:d0:
da:2c:3a:ff:27:0a:5d:72:aa:e2:1a:6c:f2:88:a5:30:b9:68:
31:d2:e1:2f:8d:c5:a4:f1:8c:f0:45:b1:62:68:c8:95:9b:06:
39:6c:83:a7:51:f1:d7:7f:1d:ad:cf:76:ea:ac:26:ed:54:95:
d4:27:88:65:ef:d1:4e:fa:2c:f8:e1:4b:b8:4c:bc:e6:24:b9:
0d:b9:4d:5d:e7:4c:26:4e:aa:ee:72:5c:63:86:b9:22:12:d7:
32:cd:29:57:92:09:4e:62:d9:63:b3:bc:d1:2f:f7:d1:b9:a2:
0c:05:f9:d7:cd:c5:4b:03:d7:75:6d:bb:ca:33:01:80:03:b0:
d4:c3:f8:f4:e8:02:c7:f6:22:09:07:b6:c0:a4:78:55:9b:2d:
a9:6e:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:26 2025 by rpki-client