Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a3b44577-07f0-34c2-9591-bfc7a3822694.roa
File: a3b44577-07f0-34c2-9591-bfc7a3822694.roa (raw, json)
Hash identifier: SxCHkG2XhuavEBFAfZRjkLfkoLz/UfNSOwP9j7Dl1QE=
Subject key identifier: A6:12:1A:21:7B:8B:B4:E6:E0:76:FA:47:8D:20:B0:8D:3C:5D:F2:43
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285842D97977D22B51F548608FEE80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a3b44577-07f0-34c2-9591-bfc7a3822694.roa
Signing time: Fri 11 Aug 2023 13:00:24 +0000
ROA not before: Fri 11 Aug 2023 13:00:24 +0000
ROA not after: Thu 09 Nov 2023 14:00:24 +0000
asID: 35913
IP address blocks: 104.250.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d9:79:77:d2:2b:51:f5:48:60:8f:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 11 13:00:24 2023 GMT
Not After : Nov 9 14:00:24 2023 GMT
Subject: CN=75324be0-6fb2-4ea1-98e9-195514b2f638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:d3:64:f7:3e:58:b8:5c:47:ef:1d:35:07:
50:14:64:73:18:3d:5d:9b:f1:f2:c2:c9:41:7f:c5:
59:f5:88:28:27:41:86:6b:58:c3:67:0b:6d:b6:ad:
5f:ee:55:18:6d:c4:3b:c7:25:3d:89:40:1f:46:f1:
de:29:d4:d1:f0:b6:60:3b:eb:ac:c0:87:c2:88:0e:
fa:fb:21:4e:36:69:f2:2d:67:9c:54:ef:10:58:1e:
fc:a4:2c:8c:ca:98:ab:53:41:49:aa:0a:c7:f2:02:
34:b5:38:55:be:b9:b8:75:45:d2:34:b6:72:5c:26:
5f:96:a2:42:b8:4d:17:41:44:7f:6d:b6:c0:8a:34:
86:a9:92:bd:9a:55:7f:8f:64:76:cd:e9:d1:a3:34:
e0:0e:8c:78:50:12:08:ff:fc:09:21:4f:e3:da:f7:
1f:5d:a1:f3:02:9f:77:18:20:7d:55:5c:db:c9:91:
5f:35:f2:bd:ca:af:cb:40:c5:d8:f7:ce:60:15:82:
11:79:26:af:68:18:27:d8:46:5b:de:c9:d4:2e:8d:
07:19:e3:94:ad:05:a0:5c:c5:cf:bb:a9:e7:9e:cd:
72:db:ef:30:c0:d0:cb:10:42:83:98:c0:81:64:91:
08:d5:09:2e:a4:6d:eb:67:15:d6:54:36:49:86:32:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:12:1A:21:7B:8B:B4:E6:E0:76:FA:47:8D:20:B0:8D:3C:5D:F2:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a3b44577-07f0-34c2-9591-bfc7a3822694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:d9:8b:f2:b0:13:eb:06:5d:7e:1e:b7:cd:36:30:23:70:a6:
cf:28:24:13:ed:66:b5:16:96:69:89:24:4f:1f:7c:04:e6:04:
b0:87:e6:94:e0:b0:0c:67:b5:07:7b:62:e6:8f:b8:fd:01:92:
df:a0:d2:a6:a3:3e:d9:55:26:59:c3:f3:52:19:33:ba:a7:f5:
41:c9:26:81:0f:c2:cb:55:f1:6a:14:3d:0d:94:1b:91:6b:e8:
93:5b:57:b1:58:8a:4f:89:9a:25:cc:b0:18:0b:9d:31:5f:8f:
c5:09:2f:97:5c:d8:52:bd:aa:d2:85:81:8f:d2:61:f6:75:96:
ce:aa:ef:b0:0b:ee:2c:7b:6b:ce:51:5d:8d:36:54:63:29:f6:
f0:b4:c6:16:11:00:43:f1:1b:6d:99:6e:c6:56:d4:9c:30:b3:
77:46:1a:d4:63:cb:02:1a:16:c2:ba:f9:9f:64:6d:b0:d1:b6:
aa:7a:82:61:c8:0c:1e:68:bd:a9:ae:52:58:f9:85:f3:91:56:
11:e1:86:ab:a4:19:72:7a:13:95:3a:64:c6:c4:d6:23:71:80:
45:be:52:e3:be:a7:ea:fd:06:75:c2:2c:46:e8:61:88:4c:38:
5c:f8:a2:36:c9:4a:88:f2:0c:81:19:cf:e7:71:e5:0a:a3:83:
71:b7:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:48 2024 by rpki-client on console-ams.rpki-client.org