Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff868780-0a93-3dcb-9daf-42c5ecad6c10.roa
File: ff868780-0a93-3dcb-9daf-42c5ecad6c10.roa (raw, json)
Hash identifier: Rz4dULclhd6BWQdDZ2DyVjxL6zHn1yeJPqrOdnVtrO0=
Subject key identifier: 65:6C:2F:9B:54:C9:CE:CB:F7:4B:87:42:22:90:94:2B:7F:81:7D:BA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A139F8628A96B71AC9DE200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff868780-0a93-3dcb-9daf-42c5ecad6c10.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:9f:86:28:a9:6b:71:ac:9d:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1ef192c6-e6d7-4c54-a37f-d4b0d58f87e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:bb:fd:96:22:d5:a4:04:7d:2d:0e:ea:ad:
71:c4:ca:b4:63:2d:11:06:5c:58:6a:fd:b1:a1:d8:
bc:57:d1:91:75:67:48:db:cb:4a:9c:bc:d5:30:91:
06:7c:94:40:53:f9:d1:3c:b9:d9:bf:f1:a0:3a:a2:
5d:7b:f1:49:e7:d6:df:f6:c1:ca:83:61:e5:f4:52:
d4:83:b7:21:37:f8:b4:7d:81:0e:36:7a:fd:a4:70:
2c:37:fe:4e:55:7a:67:7a:05:11:07:e2:3f:b8:64:
68:c5:f4:a7:eb:94:3a:16:95:ff:b9:14:cf:0b:6c:
68:c7:91:84:10:30:63:a3:52:e7:37:ea:a6:92:d0:
81:b4:14:96:f3:b0:84:07:db:7d:db:8d:0a:6a:cc:
4d:84:4a:94:1f:92:c4:4c:d8:45:55:8e:80:c1:f3:
1f:d4:db:c9:49:20:f8:1b:0b:4e:7b:33:7a:14:8b:
f2:c9:28:9b:1d:1e:d1:d5:55:7b:7a:d5:f5:b3:d0:
ba:13:8b:1f:87:a2:51:90:ff:63:ab:53:06:e3:b8:
f8:c8:b1:d6:b7:58:55:60:41:e0:54:e7:9f:08:c0:
a2:45:24:59:b6:8f:a0:ff:6a:13:3f:c3:c1:2d:96:
20:a3:95:44:35:99:f4:9a:9f:58:c3:65:6b:df:ed:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:2F:9B:54:C9:CE:CB:F7:4B:87:42:22:90:94:2B:7F:81:7D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff868780-0a93-3dcb-9daf-42c5ecad6c10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:a8:13:80:f8:50:ed:44:78:a8:c2:b6:80:d2:ef:6d:24:8f:
87:a5:18:c9:d2:cc:b8:50:37:e9:f1:19:c8:4e:58:ca:77:71:
0f:42:9d:58:aa:27:6a:a2:7f:02:c5:52:60:fe:c7:13:ef:60:
b4:ac:a4:4d:47:df:db:04:b6:7b:f2:a8:48:66:ed:78:3e:4f:
04:68:37:56:14:8d:8c:24:87:6b:73:1f:eb:6f:6d:d1:d7:b8:
3f:2a:bb:d2:0f:53:ac:8f:60:a6:b4:ee:2d:7d:a8:6d:d7:74:
b5:40:87:77:0f:6f:f7:36:d5:e8:d3:31:f6:0a:cd:3f:d0:a2:
8c:d1:44:70:f9:02:4e:b3:82:e2:e3:ce:bd:bd:59:9b:04:f8:
4c:28:da:5b:17:ed:ff:b4:1f:b7:7a:30:92:1b:93:fd:85:31:
61:60:23:af:ce:1c:37:9b:57:a8:c1:e1:85:18:c1:2e:a8:70:
24:ad:6c:0f:de:f0:38:af:5e:d4:d4:d9:34:7e:80:9f:10:21:
d6:9c:d7:f2:cb:7a:e0:0f:46:6f:51:ef:05:1c:97:17:e2:21:
94:5e:24:f9:a0:40:95:7f:fc:62:f0:88:34:5b:54:b9:18:3d:
82:19:13:21:c3:40:6b:07:17:f0:6b:4a:0d:63:62:55:fa:05:
9b:5c:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:04 2025 by rpki-client