Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/825e57dd-d035-3273-ae1e-d633e5874b20.roa
File: 825e57dd-d035-3273-ae1e-d633e5874b20.roa (raw, json)
Hash identifier: CCPsNTfDt0EMrbwH5CvdSa2dygZFUc8TcJOUqjMgVF0=
Subject key identifier: 22:81:DE:9F:7C:AF:3B:9D:72:4B:70:4C:F8:B1:5E:6D:4C:F4:FD:4E
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F432858482C0DC072244ED4D53A010750
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/825e57dd-d035-3273-ae1e-d633e5874b20.roa
Signing time: Wed 11 Dec 2024 14:50:10 +0000
ROA not before: Wed 11 Dec 2024 14:50:10 +0000
ROA not after: Tue 11 Mar 2025 13:50:10 +0000
asID: 16789
IP address blocks: 104.156.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:0d:c0:72:24:4e:d4:d5:3a:01:07:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Dec 11 14:50:10 2024 GMT
Not After : Mar 11 13:50:10 2025 GMT
Subject: CN=9fc0e5cc-12fd-44d3-b145-e73bdeecde05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:54:20:13:19:03:20:87:ba:c8:c9:47:84:
8a:7b:68:99:39:38:af:bc:1d:d4:b7:76:23:d0:66:
d0:2f:4f:91:fb:96:b4:16:84:e6:ae:84:ab:9e:49:
d3:03:86:df:28:bf:28:75:89:6a:57:1e:16:f4:96:
61:60:7a:78:00:7a:fe:32:20:2a:28:4e:c6:4c:93:
b3:8f:5b:d4:39:e1:c6:4b:45:d4:20:84:80:0a:e1:
be:5c:e7:87:7e:28:56:9c:e6:e7:b2:bf:ec:7a:cb:
8c:c2:7f:1d:90:66:e4:c9:cf:11:df:4a:f0:bd:b6:
64:67:7c:7f:2e:b7:3c:47:80:1f:3a:a6:a2:d3:83:
87:7a:0e:1f:c3:12:1b:4e:1f:57:1e:d0:74:6a:62:
0d:2d:9e:ee:41:22:4f:b5:c1:96:5a:53:fd:aa:6f:
05:8a:26:86:dd:70:b3:06:c4:8d:fa:de:ca:55:87:
99:d5:1b:8d:8a:98:41:7a:4a:16:22:0d:01:40:fc:
c7:f8:76:04:b5:51:c9:00:a4:39:20:0d:fe:1f:1e:
48:73:ad:93:fa:d9:84:85:07:fc:24:d6:3f:ad:ad:
55:df:a7:d5:57:54:fc:f8:d6:9c:14:83:b4:81:2b:
77:03:2f:cd:3a:05:12:f0:0a:f6:ee:95:71:08:98:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:81:DE:9F:7C:AF:3B:9D:72:4B:70:4C:F8:B1:5E:6D:4C:F4:FD:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/825e57dd-d035-3273-ae1e-d633e5874b20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:09:0e:24:a8:f5:cc:97:07:a5:e0:c9:e9:8e:22:81:91:de:
cc:cf:61:55:76:f0:f7:bd:60:70:7c:50:77:56:84:ab:57:28:
2e:24:ba:57:70:36:ac:44:75:e8:c7:11:e7:fd:31:55:97:5e:
45:39:60:05:32:35:67:29:af:a0:5f:77:38:55:32:e1:73:b3:
1c:12:c3:9e:a1:b0:a1:02:89:a9:0e:77:1c:44:cc:97:9f:52:
45:6b:84:43:d3:0a:66:ed:cb:ae:c9:5e:81:48:21:4c:ae:d1:
26:a3:ad:bf:59:39:5f:38:fb:90:9b:52:f6:01:a1:36:88:a4:
6e:e2:6b:04:c0:53:70:ee:af:f3:95:18:2d:0f:df:1e:8e:a4:
d3:a1:05:b2:4a:39:1f:4f:04:2e:df:45:d5:6a:db:cd:4d:03:
e6:30:0b:f9:80:06:89:90:d5:0d:d5:ab:8d:f6:f2:82:48:61:
21:92:2c:89:4a:e9:d9:a0:c7:8c:3a:f5:ac:2b:dc:7a:a4:0b:
1c:e7:2f:84:b2:3d:44:9d:1e:e7:61:cf:a2:f7:4c:ca:f7:5a:
71:9e:92:ce:e8:45:5c:06:d6:9b:fa:e8:33:3f:39:23:ea:e1:
4e:00:25:60:1d:df:9d:f2:2e:fa:80:de:b7:b7:14:3c:00:f0:
36:e2:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:17 2025 by rpki-client