Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc832285-ce92-3997-9c73-a0efe839db98.roa
File: bc832285-ce92-3997-9c73-a0efe839db98.roa (raw, json)
Hash identifier: UBMFxchGqnzztQUVfOxKr56qjis7bR5pU6vXbJ81VtA=
Subject key identifier: 38:BB:76:31:BA:12:B4:23:68:D5:AA:97:92:1E:D5:91:FD:88:9E:AA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584871C0746277CAAF60A313E480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc832285-ce92-3997-9c73-a0efe839db98.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 36384
IP address blocks: 104.135.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:74:62:77:ca:af:60:a3:13:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=931a9db2-78af-40da-8737-469099d57964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:6b:58:44:c2:c2:55:4b:98:da:57:06:25:
e9:01:67:9b:6f:72:0d:da:7f:b9:05:b2:2f:a0:b3:
a6:9a:a4:80:6a:c3:47:15:77:3c:7e:92:28:c1:b8:
2c:b7:d1:6c:cf:fd:8c:fe:f0:35:e4:8c:dc:0a:9a:
d5:c1:df:c1:fb:23:57:18:a1:c6:3f:7d:bf:38:eb:
15:d5:6d:36:44:ae:ff:bf:dd:06:b3:77:40:af:2e:
e9:2c:79:b6:32:81:ea:6c:f4:1c:38:c5:a6:07:b2:
c5:39:7c:11:ce:59:36:d2:61:7c:79:14:39:b1:c5:
57:38:60:9f:33:b0:60:7b:09:81:24:b5:37:2b:a4:
0b:ad:c6:b0:0a:41:5f:65:b1:70:b1:a8:e7:19:6d:
3d:1e:91:a4:8e:09:b2:23:30:9b:83:79:85:f0:df:
1e:58:e7:3d:d6:70:57:99:02:38:8c:10:2c:19:ae:
ac:c1:09:3f:89:47:db:ea:64:c3:f8:4a:f8:04:6d:
5c:c3:cf:da:03:39:29:17:c4:a7:68:5c:fb:6f:a4:
55:f5:59:d3:d5:48:d6:5a:b0:73:26:a8:ae:10:0c:
fc:08:69:04:63:37:4d:64:dc:a3:ff:52:91:5b:a2:
1f:72:d3:6f:b1:54:b6:8e:b0:c7:2c:c6:e0:59:a5:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:76:31:BA:12:B4:23:68:D5:AA:97:92:1E:D5:91:FD:88:9E:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc832285-ce92-3997-9c73-a0efe839db98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:c9:81:7d:6c:ee:a5:3f:6e:b4:26:f3:ce:a2:af:2a:71:c1:
fe:9c:48:f0:e5:ed:29:4d:da:52:b8:1d:25:88:1a:04:a2:97:
42:8e:10:2c:3c:3c:1c:dd:ff:f3:8d:0c:33:b5:fd:14:e0:b6:
15:18:2b:35:aa:17:2a:e2:8d:fe:d2:a2:d8:ab:70:e2:c3:33:
85:72:b5:ef:de:bc:f4:eb:c3:11:e3:8b:b2:b7:76:bb:7e:80:
b1:a5:34:b7:5e:9f:01:ad:eb:c4:e9:88:3b:d7:cf:7c:42:31:
85:8e:d6:12:cd:5c:8c:1f:eb:53:db:c0:9a:90:e9:5f:f5:16:
26:fb:2a:f7:86:98:2a:63:9b:01:af:82:4f:13:df:40:82:31:
6d:55:ea:1e:bc:08:04:af:e1:62:9f:35:3c:57:27:3e:ef:37:
a3:e2:7b:c6:3a:3d:6e:f0:ae:66:a8:ed:dc:73:87:76:d3:34:
3f:a0:5f:9c:a2:15:8a:e5:13:e9:af:01:e8:e6:fc:e7:a1:31:
0e:8e:fa:19:11:3e:87:d9:20:6d:0f:86:fb:2e:82:92:67:8a:
8d:d2:2a:b6:52:29:33:4a:61:fc:09:be:43:53:f8:e4:5b:76:
fb:67:b5:50:86:32:de:5f:8a:05:cc:db:8e:78:c2:33:f2:77:
2b:ec:a3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:49:29 2025 by rpki-client