Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/647b5bc9-c0d2-3333-b088-7ff2898b4299.roa
File: 647b5bc9-c0d2-3333-b088-7ff2898b4299.roa (raw, json)
Hash identifier: EP80E7UsjAE8JBT5u1Z/BcufZWIH/DD4Sg0BruYzu/o=
Subject key identifier: 4A:13:90:B1:62:51:0A:92:77:66:E0:81:BE:68:12:77:FD:02:0C:C3
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A10E5027BB91C77A20A4C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/647b5bc9-c0d2-3333-b088-7ff2898b4299.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:10:e5:02:7b:b9:1c:77:a2:0a:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1c881eb7-b5cf-4e13-a813-a6dcff8506ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:d0:94:2d:53:7e:07:f2:33:6b:65:7c:92:
31:a1:74:4d:39:2b:e0:63:63:db:99:fe:d3:bf:1e:
87:86:64:a5:57:64:9f:29:3a:0e:ea:af:97:0b:51:
59:ab:19:f8:14:84:00:f8:2d:68:5c:94:53:f7:c7:
05:8f:38:e8:54:25:83:98:3f:d1:58:db:79:78:d7:
a6:05:c0:f7:f9:7b:81:c1:d1:39:90:0e:dd:87:7a:
39:1a:c6:56:0f:f1:ea:c8:86:41:9a:a0:a2:91:ac:
de:f0:5f:65:e6:2a:01:2c:67:3f:26:a3:20:cf:9b:
30:38:22:bf:84:a1:1b:61:5d:ab:a7:90:19:53:d4:
69:38:5e:f4:3b:58:fe:90:0e:b4:e2:1d:e4:a1:c7:
a3:72:55:f7:d2:ff:5a:a6:12:92:2b:a9:7c:3d:fd:
07:33:16:e0:da:6a:16:1b:c8:50:4e:29:2d:5e:16:
d1:8d:d9:a6:2f:f5:31:be:33:fd:cc:5c:ef:95:c5:
e8:40:ef:3e:83:78:16:23:5e:eb:f8:68:70:4d:17:
ce:7b:ce:b7:dc:ea:a2:74:cd:40:d4:63:d9:e0:a3:
7d:18:57:ac:9b:7b:f7:61:96:ce:1f:51:41:98:55:
ad:5c:14:cf:dc:db:b3:f7:e1:8f:1d:1f:ae:af:8f:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:90:B1:62:51:0A:92:77:66:E0:81:BE:68:12:77:FD:02:0C:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/647b5bc9-c0d2-3333-b088-7ff2898b4299.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:96:3b:02:0b:61:78:cc:1b:06:73:e5:46:49:e6:e5:69:b6:
bc:d0:a8:83:0c:bf:56:3d:ff:e9:d6:30:98:35:ae:e8:cf:12:
31:b8:0e:3f:b4:91:70:16:d5:25:8c:a3:37:7b:04:d9:39:c4:
95:88:c6:81:e1:4a:8c:14:84:e2:7c:3e:f6:3a:c1:49:5e:b4:
62:dd:ce:24:c4:cf:1d:22:37:d0:5b:f1:19:c9:d8:1e:df:77:
4f:6e:cf:67:1c:c5:20:b9:11:11:b5:f8:bc:c8:63:e5:c5:6d:
d2:a8:3a:a4:87:03:fd:d3:3e:02:06:fb:c4:79:35:0f:cb:36:
f1:ba:64:dd:86:ed:f5:71:fc:50:6e:8a:00:c0:c7:5a:6c:f7:
7c:cf:2c:2b:83:9f:23:37:f7:05:65:a1:61:1b:4a:d1:da:cd:
66:a0:5e:2c:98:e5:b4:1b:b8:04:21:cf:e9:3b:3c:e8:ff:00:
8b:a0:75:c9:62:72:a0:7e:02:84:d7:fb:3d:e4:bc:70:ae:1d:
5a:15:e6:fb:62:8d:59:ab:e7:20:1c:a3:d2:be:a7:c5:c0:20:
72:65:32:c6:1c:b1:1a:36:27:35:17:62:26:c3:40:b7:0a:fd:
a8:81:47:d2:7e:37:08:d3:39:e6:17:69:d6:40:c7:72:55:74:
76:94:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:32 2025 by rpki-client