Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/07f733f7-16ee-3bf6-86e5-7c6d9a8a93c1.roa
File: 07f733f7-16ee-3bf6-86e5-7c6d9a8a93c1.roa (raw, json)
Hash identifier: Kg/pkz9KmQ4jFnusxanM0LWb65JA6QRbdIeBQwfcVcE=
Subject key identifier: 8A:20:39:23:6F:AB:07:E9:C2:E7:08:A1:5F:EC:38:F1:45:9B:1B:C2
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847FF4A5A4B0AE265AA5FF3F2C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/07f733f7-16ee-3bf6-86e5-7c6d9a8a93c1.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36383
IP address blocks: 104.135.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5a:4b:0a:e2:65:aa:5f:f3:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=a07aa6d5-a98e-4460-a0af-92046f8dfd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:2f:78:28:02:12:8f:49:0c:52:0f:cf:17:
41:b6:15:02:ed:96:db:94:e7:50:a3:15:4b:7a:bb:
99:88:52:d6:cb:22:b4:8f:dd:95:a9:fd:ad:5f:b8:
57:b9:d0:1a:8e:d6:6a:8a:9e:5f:6b:3f:22:a2:24:
22:8a:92:c0:34:98:0c:f4:ff:6c:0e:9d:da:7b:67:
fc:94:e1:64:d9:ad:25:53:b0:b8:7c:ec:76:50:27:
d5:4b:c1:e9:93:21:72:86:17:34:47:99:12:f4:1b:
d0:e4:08:aa:62:97:d7:96:69:a4:14:42:c0:95:38:
ad:26:90:16:82:c7:c3:35:3c:1d:32:fa:5f:27:99:
bf:93:a4:27:eb:fe:ec:01:f1:36:8d:5b:47:32:3f:
ce:37:25:d3:66:53:5f:de:74:e9:de:c9:9d:a1:98:
c0:46:eb:e6:e4:66:9d:96:21:1e:43:01:a2:90:fc:
dd:e4:75:e7:b3:4a:83:02:17:77:3a:78:1b:d0:2e:
04:f7:9c:2a:eb:76:7b:c3:2d:02:be:54:a8:c8:4f:
12:92:ff:1d:10:26:f2:22:2a:58:89:90:ee:75:33:
0f:a7:8e:21:de:4d:26:af:89:bf:bd:a2:2d:22:95:
44:13:28:ec:7d:f1:cb:04:25:ad:13:0d:16:04:54:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:20:39:23:6F:AB:07:E9:C2:E7:08:A1:5F:EC:38:F1:45:9B:1B:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/07f733f7-16ee-3bf6-86e5-7c6d9a8a93c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:31:bb:89:0d:29:d8:1e:50:28:6f:81:df:d9:e4:2b:92:da:
04:8f:37:ab:45:cd:56:c4:ca:a7:82:9c:17:3e:b5:d7:04:87:
5c:d7:1e:50:28:5e:cc:d9:1c:bc:50:53:a1:ff:69:bb:c0:55:
c7:d8:67:ec:9f:49:f3:bd:da:e0:a7:27:22:ff:cf:f0:27:4e:
ce:63:bb:19:5d:a9:15:42:f5:c3:f9:ec:55:e9:a7:48:3a:8b:
bb:aa:cc:20:59:6e:79:29:03:04:df:be:fb:76:d0:9c:6e:f3:
f6:77:e1:9c:b9:18:09:d1:ad:fa:46:28:31:f7:4d:d0:64:c1:
a5:06:47:94:f0:84:e4:30:70:1c:0e:55:77:e8:f0:80:28:d3:
b0:0b:4a:fa:87:27:78:d5:d5:eb:c5:47:30:dc:69:3b:02:57:
64:75:74:67:a5:84:dd:6f:15:54:48:5c:99:48:77:db:01:8f:
31:36:4e:11:5d:65:ae:c1:71:c6:89:b3:f2:83:f2:c8:09:8a:
76:c6:f8:17:a5:bc:c9:44:22:3e:9c:00:da:cd:23:31:38:95:
62:3d:17:a2:b2:90:59:84:fa:f8:16:e5:0e:88:cf:0a:b1:80:
dd:8f:cf:ba:28:bb:e3:9f:3c:ad:35:10:dc:88:f4:cf:de:ba:
98:e1:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:32 2025 by rpki-client