Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5159cd3b-419e-3688-9e73-f03be8c02ab2.roa
File: 5159cd3b-419e-3688-9e73-f03be8c02ab2.roa (raw, json)
Hash identifier: Kf7Ygr77+bzv+U2w4ok4QSf5jHJTe5EfjsG9oOIWdA4=
Subject key identifier: B8:BA:FF:E2:DF:23:B5:F5:FE:C8:EC:A3:11:51:1F:BF:B4:D1:0F:F6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309F1185B30731544B8E3FE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5159cd3b-419e-3688-9e73-f03be8c02ab2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f1:18:5b:30:73:15:44:b8:e3:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d38bf62f-bbf5-4622-88f9-6ab1b3a10c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:af:2f:f5:06:68:4a:ae:c0:8e:fa:e0:75:
71:77:b3:f3:45:9c:0a:ac:81:bf:9d:31:1a:14:d9:
c4:d0:e8:0d:f3:ed:8f:ab:ed:22:c2:26:ef:4a:20:
b4:4c:a2:9d:6d:9e:a2:ce:b7:9e:8d:b6:79:03:9f:
1b:e6:48:e2:36:d7:a4:d6:cc:16:16:e6:44:6a:34:
53:0e:d5:48:9b:b5:e7:21:10:85:88:bf:b9:7e:a1:
24:9f:b0:d5:64:61:36:22:ed:ca:7e:d4:3b:67:12:
fd:9c:8e:ea:80:80:6e:c8:67:72:62:0a:8a:f2:30:
7c:a7:65:eb:5c:09:ec:c4:1f:7f:df:e3:80:23:eb:
96:dc:0e:58:89:24:05:4c:91:6a:5a:ad:c2:fd:e2:
99:ed:b9:c3:65:9e:bb:a6:28:77:2a:91:81:80:65:
98:6d:73:97:85:43:3c:06:09:63:78:f4:af:00:7b:
cd:0e:8a:3f:05:41:49:3d:63:fb:a8:fd:6a:00:be:
14:58:07:ef:91:4b:06:d8:14:be:5d:ef:c6:11:0e:
60:92:cb:9f:11:01:40:91:55:f4:66:4f:4d:b3:44:
02:f8:7e:a8:ea:22:03:ff:0b:c5:b5:2e:91:3a:34:
70:bd:09:5c:11:33:1d:15:72:03:4d:8b:13:29:21:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BA:FF:E2:DF:23:B5:F5:FE:C8:EC:A3:11:51:1F:BF:B4:D1:0F:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5159cd3b-419e-3688-9e73-f03be8c02ab2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:1a:3d:0b:8b:76:e9:cc:36:b3:be:b0:b2:9e:1f:53:f7:49:
97:65:2e:61:25:07:da:7f:80:b7:5e:e3:50:04:42:0a:c0:dc:
4d:23:2d:ed:9d:9c:37:09:a9:69:a1:9d:31:19:e4:ed:27:6b:
f4:97:8b:55:78:31:54:d9:ea:0b:e7:4c:18:c6:8c:bc:ed:13:
69:1f:4a:32:0f:e2:71:91:22:3b:f5:8f:95:62:c3:27:92:7c:
bf:b7:d8:13:bb:64:56:de:75:c7:e3:b8:3b:c0:db:03:a1:01:
d1:6a:aa:45:63:00:67:62:5e:73:35:8f:18:22:04:27:43:fd:
da:74:12:1e:0e:b9:de:9d:89:aa:7f:9b:01:4f:d0:f4:05:d6:
a7:d5:b8:8a:c6:9c:a0:c4:ef:e5:f4:41:d7:23:6f:84:8a:a5:
f7:f5:32:f3:92:bf:84:ee:30:f0:dd:49:74:11:e4:34:17:63:
36:ff:de:bd:13:04:86:59:9f:62:c7:38:cf:61:89:35:de:ee:
bf:c1:71:a8:94:6e:a7:ba:2c:1a:49:17:b2:b4:85:20:25:80:
fa:b5:90:e7:b6:26:9f:47:da:57:0d:ab:b5:82:70:94:77:cf:
96:7f:89:7a:12:a3:a9:99:4d:5d:9f:6c:87:f0:d3:ef:94:25:
1f:40:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:11 2025 by rpki-client