Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4db642fe-862d-37d9-a210-58df9ac535b2.roa
File: 4db642fe-862d-37d9-a210-58df9ac535b2.roa (raw, json)
Hash identifier: hQKP/Bs2sTaW2SRsYJ0zucZG4TbmDTvnHB6w3C7IzRc=
Subject key identifier: DF:32:19:35:9C:71:B0:4D:E1:5A:CE:F4:C6:35:65:BA:82:70:AD:9B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848773A48C675ECF239785F1748
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4db642fe-862d-37d9-a210-58df9ac535b2.roa
Signing time: Tue 07 Jan 2025 13:05:31 +0000
ROA not before: Tue 07 Jan 2025 13:05:31 +0000
ROA not after: Mon 07 Apr 2025 12:05:31 +0000
asID: 834
IP address blocks: 104.250.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:3a:48:c6:75:ec:f2:39:78:5f:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 7 13:05:31 2025 GMT
Not After : Apr 7 12:05:31 2025 GMT
Subject: CN=91c50ef0-2bf2-415b-99ca-daee77e53e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:59:04:37:2c:3a:8b:10:1c:69:de:42:7d:
8a:b6:b8:77:e3:20:aa:03:7b:92:10:52:1d:e2:a5:
dd:37:ef:44:16:ed:e6:d4:49:e5:bd:cd:8a:67:43:
a1:e5:2d:87:f3:5d:19:82:fd:bb:33:bc:dc:b4:6f:
4e:3d:db:60:94:7f:aa:a8:98:07:ab:e8:fd:df:14:
e8:66:f2:36:d2:75:35:4c:8f:ae:af:3a:89:f3:42:
a4:94:ab:fa:13:a2:05:6d:3e:ee:07:76:80:9a:1a:
ef:ac:3d:a0:91:23:df:b4:8b:99:e4:0f:01:59:43:
3b:63:82:cb:de:46:63:04:a9:dc:9e:ce:c3:e2:6c:
0b:54:24:4f:d0:f5:a2:27:f7:5e:de:0d:a4:6e:30:
71:80:55:b5:a8:00:51:b1:7d:f5:c2:b3:77:26:b4:
f7:27:4f:f3:3b:db:69:b6:70:a4:e4:dc:ed:39:49:
b1:da:ea:4d:9a:2b:73:55:c1:d7:f4:a4:39:5a:49:
42:5d:5a:2b:26:a6:8b:64:ca:22:a1:14:36:90:c8:
07:11:09:78:ac:fe:62:96:e9:83:bd:e0:cb:5b:cc:
4f:bf:0c:70:4d:bc:cd:28:70:d6:fb:bb:bf:80:11:
cd:c2:9e:d8:77:58:78:7b:b0:c4:7a:31:ce:2f:3b:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:32:19:35:9C:71:B0:4D:E1:5A:CE:F4:C6:35:65:BA:82:70:AD:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4db642fe-862d-37d9-a210-58df9ac535b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:32:06:20:c6:fa:74:6c:e7:86:15:cf:8c:ce:65:3b:47:0b:
5e:58:3a:ee:e8:7d:e1:33:c7:97:55:02:e3:7c:c8:b3:b8:c9:
1a:c1:68:61:33:b8:6d:dc:ce:78:b2:e8:d4:54:5b:43:d7:21:
f4:84:f0:d7:33:97:db:ca:19:47:28:75:e1:d9:b0:67:44:3d:
c2:a3:52:28:d7:b6:15:f2:dd:01:f8:5e:1b:d3:b1:f8:1b:9c:
af:9f:9c:7b:b6:c8:6d:3d:de:84:90:5d:7b:e6:bd:06:98:35:
8f:ee:10:00:c0:13:04:c5:a9:3b:8d:75:e0:09:5f:49:09:ee:
12:3f:e5:7d:04:3e:d9:6b:7d:c3:ff:6b:6e:70:6d:59:e5:5a:
9c:c9:45:05:b5:9b:67:12:3c:8a:0c:ec:e8:3b:98:96:60:64:
17:ca:46:f8:28:6e:94:58:80:c8:51:32:3e:a5:ca:20:40:52:
f3:32:01:b1:60:3b:ac:16:49:5e:fa:d5:27:b8:87:1f:b3:18:
0e:17:af:1a:9d:c0:94:28:df:a9:4d:f2:8b:3d:6b:68:20:a8:
c5:a9:ae:b2:89:6c:82:6c:95:f7:5c:aa:be:82:0b:c0:00:3c:
7b:20:00:d3:ef:4e:23:dc:85:d5:19:3c:64:19:06:c2:b0:9d:
b6:c5:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:33 2025 by rpki-client