Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f9a292b-f4cc-3de7-87fb-902e199490e6.roa
File: 4f9a292b-f4cc-3de7-87fb-902e199490e6.roa (raw, json)
Hash identifier: 1cKJ0OcpXdlfmrMjNjrkMAAYKiMfEVxFjyMSR7PvWd4=
Subject key identifier: BC:14:77:71:81:89:47:84:0C:CC:7E:CF:4F:3C:36:E2:13:23:10:3D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848174A82EF4A34CE4B3F74D080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f9a292b-f4cc-3de7-87fb-902e199490e6.roa
Signing time: Wed 04 Dec 2024 04:20:37 +0000
ROA not before: Wed 04 Dec 2024 04:20:37 +0000
ROA not after: Tue 04 Mar 2025 04:20:37 +0000
asID: 21859
IP address blocks: 104.243.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:4a:82:ef:4a:34:ce:4b:3f:74:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 4 04:20:37 2024 GMT
Not After : Mar 4 04:20:37 2025 GMT
Subject: CN=69a64ef7-fb16-42d7-8d8a-45cda3354344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:90:c6:ee:c6:4a:dc:e8:9b:4a:bc:bf:87:
99:65:21:e9:f3:23:27:6b:14:c9:29:6e:fe:eb:47:
34:f4:b4:f8:b3:ce:9f:5e:33:85:7f:ad:82:27:fd:
ee:0c:2b:4b:d3:fa:7f:ce:02:d6:37:64:60:5b:2c:
58:19:e9:00:d8:b2:53:72:c6:ef:51:de:71:c3:ad:
31:ad:4f:e2:0e:1d:de:c5:ef:ce:4e:f9:f4:eb:8e:
e2:fa:8f:40:b8:7a:6a:11:7a:fc:9c:18:ba:e1:72:
36:61:5c:06:a9:1c:a0:92:20:0c:95:8c:fd:53:63:
83:da:c1:c5:e0:b6:61:b8:38:24:40:4a:f5:a7:ef:
da:a6:d0:85:84:50:c8:33:ed:bd:43:36:c3:82:ba:
57:3d:47:59:be:26:a6:73:4e:7a:dc:20:a5:a0:1d:
16:29:52:3d:e6:92:a7:99:c0:93:ca:14:8b:cc:8e:
07:4a:f3:37:38:d0:98:1a:9e:6d:5b:78:fe:6d:33:
be:67:ed:f3:ff:f0:f6:f4:f8:75:a4:bc:77:02:a1:
66:bb:4d:2e:b3:66:be:80:fb:e7:ca:41:2b:b0:79:
40:c9:47:66:77:79:12:03:4e:1e:cd:12:bf:bd:20:
34:e5:a5:54:ba:db:22:4c:b3:83:72:f7:f3:06:c5:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:77:71:81:89:47:84:0C:CC:7E:CF:4F:3C:36:E2:13:23:10:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f9a292b-f4cc-3de7-87fb-902e199490e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:b8:ae:84:4a:41:34:b7:b5:14:de:04:32:10:03:75:fd:d9:
9d:58:e9:0e:33:63:0a:ce:e1:f7:fb:aa:46:7a:83:ff:1d:12:
f0:7b:0f:ea:46:5e:83:3b:8a:e7:b2:df:82:b0:b6:c6:87:ed:
3a:8e:fe:90:23:60:2b:d3:f2:8e:6c:f4:85:9d:47:16:32:22:
1d:fb:6f:10:ab:26:bc:ac:a0:e8:ca:5e:9e:75:bc:2c:a8:81:
7a:e7:80:b5:59:3d:34:38:c8:1e:75:f0:d5:91:4c:9a:58:a8:
a4:05:9a:2b:6a:78:5f:6f:d9:3d:97:0d:52:a7:bd:72:89:b7:
62:87:70:7f:3c:26:eb:48:12:41:a9:e2:c2:6c:f1:a6:b3:ea:
31:30:37:45:66:72:3d:5d:d3:4a:87:07:b5:c4:83:f6:01:96:
8a:c4:1a:7d:5c:70:57:ce:7c:a9:42:a1:1b:45:79:29:84:4e:
21:99:aa:ea:3d:d0:ae:94:ab:a5:c8:63:24:d0:8a:7d:2f:52:
bb:39:ba:00:6d:e6:3a:cc:6b:0e:d6:cb:2c:6d:82:b6:4e:51:
5b:f2:ee:04:ef:46:c4:f2:d4:2c:d7:4a:ae:c0:9d:ff:cf:63:
b7:7f:1c:14:59:f7:b4:59:ff:2c:6c:3f:c4:50:5f:be:9a:72:
17:19:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:56 2025 by rpki-client