Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2641324b-5205-31c6-8fae-a299b3f52651.roa
File: 2641324b-5205-31c6-8fae-a299b3f52651.roa (raw, json)
Hash identifier: m0ihNTA6xLBp7O71qm8g330WAiUqflNZhanUdy5PH9w=
Subject key identifier: A0:39:B1:84:9D:FB:42:91:9E:64:CE:30:B6:8D:78:B2:2C:EE:5E:CC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584863D51FB3943FC9CF2EB91080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2641324b-5205-31c6-8fae-a299b3f52651.roa
Signing time: Tue 31 Dec 2024 14:21:20 +0000
ROA not before: Tue 31 Dec 2024 14:21:20 +0000
ROA not after: Mon 31 Mar 2025 13:21:20 +0000
asID: 214025
IP address blocks: 104.243.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:d5:1f:b3:94:3f:c9:cf:2e:b9:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 31 14:21:20 2024 GMT
Not After : Mar 31 13:21:20 2025 GMT
Subject: CN=e307e385-a4f4-42e4-aa68-0586ce2af1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:1c:11:ec:52:73:3e:03:09:35:94:c9:bc:
be:74:a2:90:ed:17:a2:d5:2f:2b:af:bf:51:6b:11:
78:47:ea:3c:95:68:4a:f2:90:e2:0b:9d:8b:fa:fb:
58:02:d7:4b:d1:e7:12:7f:db:89:6f:7e:f3:a3:25:
98:f9:52:63:ee:db:2b:34:31:8e:b7:10:fa:df:b8:
59:37:44:6e:76:ea:06:8b:59:14:4e:31:43:8f:47:
93:1c:f6:bf:e5:65:7c:83:ef:7b:f4:a1:c8:ff:d9:
d6:13:ca:ad:b1:8d:11:21:89:e9:72:8a:71:62:f0:
0c:c7:ac:65:b8:71:e0:09:92:d6:ea:45:69:d5:ed:
f4:80:0b:ce:0a:e2:2f:75:1d:4c:44:ff:4a:0e:a1:
30:c3:0a:65:d6:ec:37:b9:b9:46:0c:2f:cf:74:db:
e5:b6:64:ad:28:c6:22:84:0b:9a:3b:40:b0:ec:05:
a4:72:34:5b:6e:8d:52:68:3b:4a:9c:2a:7c:53:3f:
48:a7:3a:cb:6d:57:e1:93:c2:6e:fd:dd:b0:0d:b0:
d0:96:41:96:9b:30:8a:f5:34:36:5d:ec:5c:fd:ce:
db:00:69:ca:bc:d8:94:d6:cb:8a:f1:7f:1e:20:7e:
3b:a7:49:45:60:4b:51:5c:09:b5:0d:92:ee:b9:5d:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:B1:84:9D:FB:42:91:9E:64:CE:30:B6:8D:78:B2:2C:EE:5E:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2641324b-5205-31c6-8fae-a299b3f52651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:da:be:33:c5:c2:c7:e1:1d:db:70:8f:af:81:6f:75:89:88:
df:2c:d2:62:8e:16:39:1b:32:3b:61:a6:6c:b1:d7:bb:a9:21:
11:7c:4c:a2:6d:3f:5a:3a:fe:f5:56:7b:a7:3e:47:fd:80:f1:
ef:79:9e:0f:e3:ea:32:35:65:3f:08:21:36:d1:e4:0b:46:1f:
af:62:af:4b:86:70:50:50:85:ae:d6:da:7a:cb:8d:29:ea:87:
ea:a5:14:e9:c7:76:11:08:a9:ce:7a:e6:21:18:67:cd:1e:86:
67:39:7f:1e:6c:45:e7:0f:46:18:87:5c:ee:b5:24:8a:78:4d:
f0:d4:44:91:c9:be:6b:be:2e:a9:9d:7c:fe:ef:ec:25:25:4c:
dc:94:34:17:83:77:2b:f2:1b:6a:ec:dc:ec:7c:69:20:b8:f6:
b1:10:df:72:45:5f:a8:6a:c3:77:a0:a1:9b:7a:30:29:00:f9:
44:99:da:c7:36:92:4e:89:93:ba:33:01:a8:14:11:45:00:4d:
94:75:fe:ab:5b:71:8c:f7:37:fc:6f:54:0e:8f:b2:44:c3:e4:
b3:2e:32:68:95:b8:b3:50:8e:d7:6f:ff:f8:ba:0e:f9:5a:cd:
8c:13:6a:f2:2e:d2:12:74:3d:c4:ae:9d:62:b8:3b:f6:69:5e:
6c:0d:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:51 2025 by rpki-client