Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d5b4c2a-171d-3bb8-af0e-ac45730e146f.roa
File: 6d5b4c2a-171d-3bb8-af0e-ac45730e146f.roa (raw, json)
Hash identifier: wzDzT6eeb92hpZ+PJGr3mQWhqF0vOiwW86iYozQHjOo=
Subject key identifier: 2E:2A:9A:95:D5:22:1C:1B:2D:CB:8D:4A:6B:97:94:55:CE:23:04:F7
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A0C75B66499081A8680B800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d5b4c2a-171d-3bb8-af0e-ac45730e146f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:75:b6:64:99:08:1a:86:80:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ba252144-894f-4770-a5ed-3a1f6fca87df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:8c:17:92:60:22:af:36:7c:ba:41:9a:c2:
21:08:23:15:91:f9:26:9c:71:89:60:2a:e0:d7:fc:
a2:82:16:58:4d:2d:e3:6f:7e:c0:2e:5c:ae:8b:11:
cd:9d:9e:3c:86:64:89:0c:6b:7d:55:ac:a6:72:e0:
e0:ed:7b:72:9f:a9:37:92:8e:c2:1a:f4:92:40:d5:
c2:0b:c1:55:70:99:9e:0f:d6:79:2e:87:94:7d:40:
b3:a4:09:25:db:93:26:fc:b1:7c:60:2e:a0:1c:ae:
9d:23:e6:62:73:af:47:85:2c:b4:b0:b7:12:d3:00:
8c:2c:ea:87:c1:3d:8f:c8:9e:31:f4:9b:f8:a5:11:
9b:6e:b9:54:6d:42:cf:da:d4:49:b0:4f:fd:25:5f:
b1:47:4d:0e:78:f3:79:43:1a:f7:c9:68:96:81:45:
91:41:17:b3:8c:67:c0:df:63:8a:f0:e2:60:bf:1f:
0d:5d:f7:dd:b0:ad:66:3b:78:a4:f7:06:ac:c4:b2:
94:a2:d6:ca:f9:a2:2d:17:d6:62:f4:0d:90:96:6b:
da:1f:29:a4:49:a9:6c:60:c6:f8:e0:cc:6e:00:69:
90:bf:67:6d:82:e2:72:e2:f0:db:e6:58:19:b7:0d:
86:2b:ac:8d:a5:31:71:b1:6d:cf:d3:c3:4a:8c:e8:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2A:9A:95:D5:22:1C:1B:2D:CB:8D:4A:6B:97:94:55:CE:23:04:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d5b4c2a-171d-3bb8-af0e-ac45730e146f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:75:56:a5:2c:59:1e:ac:02:ab:0a:50:c6:05:5d:dc:be:38:
f4:37:cb:41:b1:79:f8:83:06:e9:41:59:d9:a6:ef:d0:d0:a4:
c5:5a:06:e2:2c:4b:c9:ba:a0:79:a0:a5:d5:96:31:b4:e4:b6:
c6:fe:2f:da:6f:d4:7f:0c:de:22:ef:cf:82:04:d2:de:d5:27:
ca:f3:f4:64:29:e0:bf:2c:bb:7f:e2:8a:94:e4:a9:5a:ae:c9:
11:c5:da:31:ba:42:01:82:68:62:83:e5:e2:11:55:a2:ee:87:
ae:6a:9b:b2:89:9d:e6:fa:4c:81:70:90:76:73:ac:71:f7:07:
f4:11:63:3f:ab:b9:f5:0d:0f:a3:1f:1d:ec:25:64:aa:bb:8b:
63:97:96:8b:b2:bb:44:09:14:34:08:96:f2:1d:f5:ba:48:fb:
a3:0c:d5:84:58:67:35:ab:13:80:ae:27:7e:df:21:06:ef:80:
a6:28:9f:49:b2:e1:91:81:fc:ab:86:62:23:d8:05:26:72:8d:
16:6d:b9:b1:3d:41:32:e1:ca:78:e4:c5:31:5a:88:69:aa:d6:
89:ab:10:39:00:9f:5a:dd:61:08:ff:67:a3:3c:ac:ae:ae:fb:
6c:60:5c:91:b4:31:bc:7c:91:48:55:3f:1a:b4:62:8a:3c:f5:
d1:d9:35:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:50 2025 by rpki-client