Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8a9d6d9-3ec2-3bc2-8b95-a62447ef5bde.roa
File: d8a9d6d9-3ec2-3bc2-8b95-a62447ef5bde.roa (raw, json)
Hash identifier: c/v9n1kPUvbAhwOgrt8tyqiZV4bIlsXH6FTuuq8iWqY=
Subject key identifier: 28:53:77:4B:A8:3E:D2:02:4D:AD:10:6A:E4:63:52:79:B1:21:48:A3
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847FF4A60E1867614692AED2880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8a9d6d9-3ec2-3bc2-8b95-a62447ef5bde.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36411
IP address blocks: 104.135.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:60:e1:86:76:14:69:2a:ed:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=d15354c4-df8c-44f8-add1-618e85da2c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:d2:23:52:e6:53:5c:82:c1:0f:02:96:f1:
66:c4:8e:09:96:7d:e5:23:19:d6:1c:04:5f:70:43:
78:3f:bd:bd:ee:da:33:d9:35:a1:cd:4d:0f:22:3c:
ca:bf:23:4d:2a:1b:69:1a:99:91:ae:8f:a3:3b:91:
31:61:34:ed:d8:ba:dc:36:c3:16:6a:b3:a7:61:23:
58:67:a0:e1:d9:4e:2e:28:0c:ac:6e:da:af:8f:43:
b2:80:ec:fa:20:0f:90:1b:79:0c:d4:53:d0:6c:42:
f9:82:da:ca:94:00:6e:45:a1:c4:2b:aa:f5:1b:94:
12:da:d3:c9:dd:81:d2:aa:ad:64:55:ee:1d:98:e8:
23:07:d3:11:4a:85:1f:08:a9:3e:43:02:bf:68:ee:
ca:cb:9c:3b:f3:af:95:d3:69:da:c6:51:a0:0a:63:
de:3b:70:79:89:4a:f2:ba:a5:06:e6:18:d3:82:01:
5a:7c:26:bb:90:19:c6:c0:7b:40:4a:06:18:46:82:
84:f8:60:ef:01:54:6e:e9:ac:10:5f:98:74:6b:a5:
67:8f:8b:c4:4a:dc:41:ca:33:a8:ce:aa:f4:be:a0:
88:06:83:b0:ae:cb:4b:e1:ac:42:07:f8:01:72:be:
37:99:65:10:9c:3e:db:00:64:be:cf:e2:57:db:2a:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:77:4B:A8:3E:D2:02:4D:AD:10:6A:E4:63:52:79:B1:21:48:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8a9d6d9-3ec2-3bc2-8b95-a62447ef5bde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:94:ca:bf:51:b1:2c:bd:5d:54:03:8e:36:29:43:61:fa:d0:
d2:4c:ac:e6:00:a4:27:24:9d:e1:c7:3e:ef:77:42:0b:03:85:
9f:ca:55:77:1d:8c:99:5c:22:be:44:4a:7f:ab:e4:07:b4:4a:
47:0b:fd:d7:90:d1:ad:69:33:fc:3e:8b:b2:c0:2e:6a:a3:21:
75:c5:08:4e:3a:e6:65:13:21:4e:de:88:3a:e0:a2:16:0c:bd:
8d:33:fb:62:64:1c:9f:74:2a:e0:68:a4:17:55:ca:86:55:f7:
24:a0:b6:54:74:bd:d7:f3:22:68:cc:8b:0d:e7:86:d4:13:79:
97:65:19:23:ad:d5:55:d6:09:2c:93:a5:b0:e2:cc:b1:bf:bd:
10:bc:19:5a:b6:83:27:5a:ea:77:33:5b:28:ab:0e:10:80:9a:
1f:61:2b:26:ed:92:26:ee:f2:dd:da:0b:4a:e5:47:ad:32:a7:
3f:80:e9:87:9d:76:48:28:e1:27:23:dd:5a:f2:87:5c:4b:42:
9d:de:75:06:10:fd:bb:d7:2a:79:df:36:dd:e6:80:10:e9:a1:
ea:84:78:83:b6:da:6a:9e:75:dd:54:21:b0:88:db:7e:e9:42:
4a:31:9d:9b:a3:74:e6:ed:ba:1e:c0:89:75:0c:8b:e2:9b:53:
4d:00:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:55:58 2025 by rpki-client