Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4876a4d-e418-3327-a28c-ac26ee528e00.roa
File: b4876a4d-e418-3327-a28c-ac26ee528e00.roa (raw, json)
Hash identifier: KsB52ppqgGmEstLK9RPqtIw8FFp97nHJuYv+NFG8bcI=
Subject key identifier: A4:A8:49:0B:63:75:E0:F5:77:73:1D:CB:59:21:6B:A0:23:96:A9:D5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584863D4218E4216DC6353AB8780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4876a4d-e418-3327-a28c-ac26ee528e00.roa
Signing time: Tue 31 Dec 2024 14:19:20 +0000
ROA not before: Tue 31 Dec 2024 14:19:20 +0000
ROA not after: Mon 31 Mar 2025 13:19:20 +0000
asID: 215304
IP address blocks: 104.243.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:d4:21:8e:42:16:dc:63:53:ab:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 31 14:19:20 2024 GMT
Not After : Mar 31 13:19:20 2025 GMT
Subject: CN=33fad7bf-8ccc-4f56-a2e0-ec1afc4f9d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:da:fa:cb:77:6b:b0:3a:08:bc:24:29:4e:
04:db:0f:72:32:dc:82:54:c2:9d:6a:f0:1f:59:e0:
93:de:a0:4c:0d:06:63:93:88:25:2c:f6:5f:a9:61:
35:0b:c9:a5:e0:08:97:9f:62:eb:1e:74:92:9d:b2:
76:8c:3a:e6:14:63:f1:f6:c5:fb:c2:95:43:cc:a6:
30:d6:e6:f4:51:82:3f:19:46:a4:3a:45:37:79:e3:
b4:ec:81:c6:1a:76:71:71:d7:02:41:85:d4:85:61:
d4:9f:6a:d8:05:af:5d:6e:57:7e:3c:bd:92:78:7a:
8e:34:81:62:a3:04:df:a0:0a:db:c6:31:26:8a:a7:
ca:de:9a:1a:39:21:e5:ed:e3:d1:b3:5c:8e:1d:3b:
cb:09:0d:7e:82:a7:b4:8b:12:f0:a8:88:41:70:a4:
61:8e:04:8b:08:ed:75:d2:b2:08:e3:9e:f9:fc:58:
47:12:84:5f:6f:d1:94:ce:76:35:db:b1:db:90:21:
d8:a8:f2:c6:50:9e:e5:4d:dc:b3:1a:4a:14:84:61:
28:7b:62:d9:a4:d4:26:98:40:72:82:40:f5:82:77:
a6:e3:8a:ce:76:e7:89:ee:b2:d1:26:3a:f2:71:ad:
4b:94:5a:b7:fa:2d:25:fb:56:8f:1d:dd:39:cc:4d:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:49:0B:63:75:E0:F5:77:73:1D:CB:59:21:6B:A0:23:96:A9:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4876a4d-e418-3327-a28c-ac26ee528e00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b4:8a:95:ef:45:f3:70:c5:09:bf:98:76:d1:ab:c2:b7:f5:
e5:44:16:a0:45:da:fd:0a:6b:eb:3d:a7:b2:d1:77:e4:cb:3f:
93:ae:51:fe:9f:6d:c4:25:34:1d:a0:62:2f:ec:3a:29:55:63:
3f:a9:c4:dc:a9:85:5c:f2:84:62:5c:ce:15:8d:ff:5b:17:7f:
37:ec:91:7b:31:66:55:82:be:5b:ba:ae:5c:25:1d:df:d1:4c:
ce:9d:78:06:7d:0f:19:ab:9f:4e:21:7e:0b:26:2b:46:e2:db:
4a:2b:b8:3e:da:30:f5:b5:46:fe:5b:32:66:dc:13:bc:54:7f:
41:25:8d:84:3e:8c:64:05:ac:e8:20:c6:76:ea:97:8c:86:77:
30:e4:45:0f:29:94:35:50:c9:3b:3b:1c:cf:59:21:e0:ea:a9:
09:74:e3:e4:b4:3c:20:40:f4:92:2d:33:cf:41:2e:7f:f6:c1:
7d:ad:c7:81:2e:fe:d9:c0:54:a5:50:81:9f:22:c3:56:41:03:
4f:e7:c0:42:2d:86:d5:de:6e:8d:c7:88:bd:03:6f:87:7f:4a:
53:f2:a5:ff:9c:06:45:49:ca:9f:2a:6a:e0:55:47:f7:53:9a:
cc:a0:03:72:96:c2:fd:8f:98:dc:19:db:00:53:2b:05:fa:4c:
9a:79:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:58 2025 by rpki-client