Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/073d3b0e-0fcd-378d-a42c-2a81a03c41fc.roa
File: 073d3b0e-0fcd-378d-a42c-2a81a03c41fc.roa (raw, json)
Hash identifier: M2URjY3z2DM971zMttkzyGx0RBBxQ71FR7fYdAPw7ww=
Subject key identifier: 34:C9:53:54:B3:63:E5:36:65:35:35:B2:96:DB:03:E1:6C:58:C6:9F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858487683947EA93B5F23B2CABE40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/073d3b0e-0fcd-378d-a42c-2a81a03c41fc.roa
Signing time: Tue 07 Jan 2025 06:57:23 +0000
ROA not before: Tue 07 Jan 2025 06:57:23 +0000
ROA not after: Mon 07 Apr 2025 05:57:23 +0000
asID: 834
IP address blocks: 104.243.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:76:83:94:7e:a9:3b:5f:23:b2:ca:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 7 06:57:23 2025 GMT
Not After : Apr 7 05:57:23 2025 GMT
Subject: CN=4dd9623b-4fe4-49a1-911b-d28bdf42af9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:5f:50:e5:24:ad:b3:4e:f9:f6:a7:a4:dd:
81:11:74:52:06:2d:e3:0c:cc:cc:52:8a:60:c1:8b:
10:59:5a:19:c9:90:f1:ac:37:7f:d7:20:59:1e:b8:
cf:31:4c:47:96:73:39:49:e5:dd:12:d4:06:ff:de:
3d:14:bc:8a:9e:d6:40:71:92:e5:d0:73:b4:80:67:
88:be:6e:2a:17:3f:ea:62:21:59:ee:8f:97:4d:67:
f2:9a:2b:7b:42:69:91:92:3a:0d:b8:99:dd:01:ee:
ed:e3:7f:24:fe:ea:23:ea:5e:3b:84:a2:bc:9b:ce:
0c:44:fe:8f:66:5f:c9:4a:5a:3c:b4:1a:1f:27:1d:
56:90:c8:ed:52:cc:66:d1:45:50:44:8a:22:b1:09:
b7:44:17:b1:a9:1e:66:19:be:58:38:17:56:47:11:
3c:29:b7:b7:0c:a1:36:18:99:26:cc:f6:40:2a:aa:
e9:78:e8:84:ae:00:0a:5d:25:0b:4a:7a:53:73:5f:
6c:15:15:c4:a1:13:ab:4d:1f:02:28:bb:83:af:f3:
5d:22:f5:d1:36:9d:3e:21:ca:1c:58:3d:72:e6:4e:
e1:7d:02:c5:a3:24:5e:ef:5f:53:39:d9:74:af:3d:
3c:bf:b7:10:69:dd:f6:5f:9e:01:9d:33:2d:3b:11:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C9:53:54:B3:63:E5:36:65:35:35:B2:96:DB:03:E1:6C:58:C6:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/073d3b0e-0fcd-378d-a42c-2a81a03c41fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:dc:35:e8:b3:81:ad:3a:3d:6f:17:0d:5a:75:6f:35:0c:d9:
22:a7:ef:38:9a:e4:aa:e7:eb:b6:e8:9e:83:b9:86:ca:51:09:
33:86:f0:8c:92:5a:7f:5b:94:a1:9d:cb:68:20:52:2a:3d:36:
b5:24:84:b0:d9:02:69:87:ed:55:73:ad:c2:50:ab:5e:97:85:
80:59:6e:40:fc:a7:2e:c8:12:80:6a:41:2b:80:54:83:e3:91:
5e:98:7c:85:0e:4a:98:a2:8f:de:ab:d6:34:29:10:90:4d:34:
c3:c3:56:0a:4b:c6:56:d5:c3:d7:d1:86:6c:1c:27:12:e8:20:
d4:bc:50:d0:16:57:70:cb:9b:05:1e:d3:71:33:ae:32:7c:0e:
26:8a:be:42:ab:ac:92:7b:91:98:e5:48:b9:88:a3:1e:3e:19:
aa:cc:b2:e5:23:d0:d8:ec:49:7d:78:ac:39:f6:c1:a7:b8:60:
1b:2b:4c:59:cb:c6:fe:1c:63:a1:0e:79:9f:87:82:83:77:d4:
bc:53:a4:6a:13:c2:90:e7:7e:15:10:96:97:76:d1:5b:bf:38:
de:c8:18:8a:c2:ff:dc:ba:2e:06:a6:05:38:07:02:fc:30:d8:
b0:35:57:34:aa:75:1f:10:9c:a5:d3:9b:c3:03:29:76:35:d8:
c0:9c:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:34 2025 by rpki-client