Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2cc502ee-19aa-3213-b9a5-9d7ba954a862.roa
File: 2cc502ee-19aa-3213-b9a5-9d7ba954a862.roa (raw, json)
Hash identifier: qOBKMHIWPL1G6j3ks2e2U2que7n7BptHau2QI8hPTuk=
Subject key identifier: D1:6D:8D:65:32:E8:A7:6B:46:4A:66:26:13:56:14:0A:C0:FD:7C:5B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A119E1ECDD97B2FAF666B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2cc502ee-19aa-3213-b9a5-9d7ba954a862.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:11:9e:1e:cd:d9:7b:2f:af:66:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=70ee2380-0a9d-4514-a38e-aee656a56851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:9e:7b:e0:f2:8f:c3:1e:ea:44:7c:f0:4a:
a7:f7:6a:26:3c:ff:48:49:e7:30:4f:f2:2f:62:b1:
2c:87:99:6f:95:ed:7c:d9:8b:f3:f9:8c:c7:a1:ee:
75:70:c2:82:fb:6f:e1:75:94:cf:b8:56:60:02:13:
fd:dd:da:c8:92:85:f4:df:82:3b:39:2a:61:56:27:
87:15:8c:f0:af:a0:cb:3c:f5:b3:81:eb:47:5e:b4:
1e:eb:c1:ac:27:17:20:93:64:5e:cf:26:bb:81:f6:
28:20:3d:e3:c3:f4:12:30:ea:2e:0c:db:b0:f2:70:
9f:51:78:6b:c5:80:a9:6e:60:8b:d8:ba:a0:77:cf:
66:0d:45:ed:53:6c:e4:72:8f:88:5c:f7:39:fd:05:
d6:83:20:a5:9f:83:1c:24:b3:6c:9b:1f:2c:1a:57:
0e:d0:73:99:57:69:40:e3:4b:cc:bb:e0:4c:d0:0d:
9a:37:a5:a6:97:76:7b:88:1c:aa:98:f1:45:d9:49:
ca:ab:07:dc:6f:67:af:f6:aa:55:5b:ef:e7:e0:95:
c8:d9:47:6e:dc:49:96:55:11:fb:e8:da:bf:09:36:
ff:f1:4e:f1:f0:51:2a:36:02:04:cd:b6:49:e0:6d:
48:f0:0e:85:86:90:81:cf:09:0e:50:ad:41:67:b5:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:8D:65:32:E8:A7:6B:46:4A:66:26:13:56:14:0A:C0:FD:7C:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2cc502ee-19aa-3213-b9a5-9d7ba954a862.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:e3:e1:b5:09:5f:19:9c:5e:bc:d5:a1:ec:88:27:98:4c:52:
f8:0a:47:58:a9:54:86:17:80:1c:bc:3c:08:b1:13:4b:cf:31:
25:0f:6f:c5:69:44:38:18:d0:37:cc:fd:85:9f:3f:94:e5:76:
c5:65:a4:43:b1:70:ca:3f:4c:5d:76:b7:4c:f2:e4:51:a4:31:
0b:44:98:44:48:b7:40:58:37:15:2a:54:92:6a:79:18:97:60:
a4:71:4b:1d:e4:de:77:7f:38:c6:75:c4:ae:64:cd:0f:68:ff:
f5:db:38:54:67:d3:bc:08:8d:95:5e:4d:f9:a8:a7:b6:ec:d3:
75:97:8c:7f:51:a1:83:6e:68:5f:cc:e7:3e:c8:29:b1:81:fa:
e5:7a:56:4b:3d:78:3d:5c:b9:c2:25:71:de:19:f8:cb:00:4e:
0b:4e:a1:b0:13:23:52:d3:1b:99:63:f1:8a:1c:e0:33:0a:12:
ba:35:11:ea:a3:02:34:33:70:7f:8e:2c:7f:f4:91:17:5a:e0:
15:5c:b1:ad:c5:16:5e:04:d0:63:6b:27:84:d2:82:28:0d:3d:
e7:04:86:d8:28:ab:a8:8e:f2:ee:59:82:e0:d6:bd:03:b5:68:
3e:f6:f8:a5:8d:f3:b6:15:ef:57:4a:5a:0f:91:a4:30:a8:b8:
5c:8b:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:38 2025 by rpki-client