Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a98bf7bc-d3d1-3e0f-92b7-789244e475cc.roa
File: a98bf7bc-d3d1-3e0f-92b7-789244e475cc.roa (raw, json)
Hash identifier: jy4I/jTyxCPu1nk4E0EdlpQxR7qrOt7ojdAERl1/5Kc=
Subject key identifier: 85:A1:DE:FC:F5:8A:D6:40:37:79:62:B9:11:5C:69:AC:58:04:F1:77
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A55229633FEEF35CCD7E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a98bf7bc-d3d1-3e0f-92b7-789244e475cc.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.134.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a5:52:29:63:3f:ee:f3:5c:cd:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4a66ff22-af05-49a4-b310-49ed9c99e2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:51:bd:5a:39:16:78:a3:f1:01:92:93:c3:94:
eb:80:98:b6:ca:8c:e9:89:71:48:6e:5f:1f:8d:7d:
00:16:37:6a:af:f9:fa:95:ba:19:4e:1c:11:d1:55:
54:e0:51:2d:57:60:57:9a:00:0d:47:59:1b:26:83:
0d:19:50:ef:6f:3e:01:d5:e5:71:d7:62:02:77:8c:
11:fb:ef:04:db:1d:fd:64:32:75:96:85:f4:3e:ee:
ef:62:2d:12:5f:f5:2a:e4:df:6a:e8:19:2c:18:58:
18:e6:d3:7a:e9:1c:32:cd:b9:c1:59:2a:b7:36:9f:
3f:2c:b3:39:a1:30:b3:4a:23:d5:1d:c8:1a:95:09:
e4:b1:f9:75:67:a1:54:b9:a9:ed:28:01:be:29:f1:
f2:dc:44:93:94:42:8f:ff:9f:7c:4b:50:59:11:95:
ec:46:9d:0c:d5:ab:09:e9:1b:2d:aa:19:91:2c:84:
1d:4f:1d:8e:01:d1:52:70:9a:33:df:a8:f7:3b:c0:
fd:fa:62:b1:3c:56:90:27:43:60:fb:f0:d7:74:7b:
b8:35:6d:b2:a5:b5:6f:59:39:42:01:a8:6c:df:82:
66:9d:30:82:50:df:4b:bf:10:26:08:a6:a1:83:78:
83:b1:93:ae:98:3e:10:40:2b:01:eb:4a:16:f4:d5:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A1:DE:FC:F5:8A:D6:40:37:79:62:B9:11:5C:69:AC:58:04:F1:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a98bf7bc-d3d1-3e0f-92b7-789244e475cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f2:6b:1e:4e:74:41:d4:d9:cb:58:fc:6a:8c:62:03:08:09:
4f:6d:ae:bd:9c:3a:6b:92:00:6d:cd:03:78:b4:82:ab:13:cf:
17:8f:b4:a3:3e:b6:ed:78:36:d2:7a:d8:2f:b0:44:a9:d3:fe:
ab:32:91:4e:25:e0:4b:09:40:5e:71:67:d3:16:14:63:ae:70:
42:2e:14:ad:d1:00:7e:c9:1c:45:de:dc:cc:30:c9:eb:38:59:
b2:42:4c:e6:92:ad:87:c1:c3:47:93:6f:b3:d4:78:ff:15:81:
de:9b:dc:88:9a:e7:a7:70:d3:c0:09:63:e0:33:c7:05:e9:26:
79:34:02:ed:36:83:0a:a4:1e:35:e4:e1:d2:de:2f:8a:8a:06:
d1:74:f2:b0:df:c2:7b:28:a4:e8:98:a1:99:b7:66:07:79:97:
a7:53:e0:ae:d2:ba:f9:e4:2c:e7:9e:38:37:e0:3e:41:be:d0:
9e:29:71:14:93:b2:fc:45:b0:94:8a:b2:a8:0b:0a:3f:8b:68:
c6:d7:99:22:ee:34:d9:08:ff:d5:e4:06:d8:4e:c9:fe:e1:23:
10:bd:4b:85:a4:ff:7c:f5:54:7d:c1:6c:c2:ba:1c:c6:77:8f:
92:29:09:55:23:cd:47:77:bd:4c:c8:0b:fd:41:c1:1c:b2:af:
14:01:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:46:39 2025 by rpki-client