Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c6a1fba7-0b59-34ef-aee6-2752f67e166a.roa
File: c6a1fba7-0b59-34ef-aee6-2752f67e166a.roa (raw, json)
Hash identifier: to/7k1eRETRb1IjfalcoNGXlf3BQqp4RlIalvPM9bus=
Subject key identifier: 95:F3:E9:51:E5:B0:7F:C6:56:FF:77:C3:9E:0C:05:39:0F:3E:5E:77
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858475DEF5B7C4F2E081D79F37180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c6a1fba7-0b59-34ef-aee6-2752f67e166a.roa
Signing time: Sat 28 Sep 2024 18:52:24 +0000
ROA not before: Sat 28 Sep 2024 18:52:24 +0000
ROA not after: Fri 27 Dec 2024 19:52:24 +0000
asID: 23470
IP address blocks: 104.243.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:5d:ef:5b:7c:4f:2e:08:1d:79:f3:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 28 18:52:24 2024 GMT
Not After : Dec 27 19:52:24 2024 GMT
Subject: CN=773ec557-cd8f-412f-b97c-2f4107281867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:67:03:3c:87:11:bc:24:ed:cb:ec:43:c7:
cd:5b:a4:6f:21:b9:e2:56:00:cd:5c:6d:09:d2:4a:
d4:c7:55:46:12:a5:96:99:9a:16:2c:19:ee:0f:7d:
66:e7:0b:72:96:fb:c7:7c:c7:6f:8b:87:59:ca:4d:
a3:10:5c:4d:51:96:43:7c:6e:92:cd:88:67:b7:c2:
74:16:6b:6a:30:0c:44:3c:f9:22:67:30:d4:4e:39:
d0:33:bf:48:c6:2c:6d:a0:ba:44:b2:20:57:8f:99:
4a:24:7a:94:e5:24:25:8e:a5:82:c1:aa:fe:ab:42:
a9:8d:69:ea:83:53:93:a2:11:0f:ea:e9:c4:5c:8f:
12:3e:8b:bd:3d:85:2f:f9:ad:3e:16:db:2f:67:45:
d7:f6:08:78:b9:41:e5:4b:13:20:8d:0c:d7:d7:b3:
af:d7:93:43:56:bf:28:52:61:45:95:40:0d:95:3d:
3b:c9:9b:19:8e:94:3e:1d:3b:0a:c9:b4:38:75:2c:
fc:78:18:f5:74:4e:e1:1a:eb:74:5f:78:a6:26:d7:
39:f5:8c:8a:ba:9f:5e:c5:c4:eb:86:14:4d:b1:a3:
79:a4:de:4d:6a:8f:05:e9:ae:b6:99:94:aa:4c:59:
9b:24:ef:dc:50:8d:fc:5b:36:0a:bf:e5:fc:52:22:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F3:E9:51:E5:B0:7F:C6:56:FF:77:C3:9E:0C:05:39:0F:3E:5E:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c6a1fba7-0b59-34ef-aee6-2752f67e166a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:94:ed:fe:77:fd:07:20:cb:54:01:bd:70:91:8e:02:03:b6:
37:2d:e7:e3:aa:bb:b3:e0:eb:1c:51:fe:0a:cf:b5:33:43:32:
34:ea:9e:bc:b4:a1:2b:3b:d4:b3:cb:8a:c1:0c:12:cb:13:38:
44:34:c8:b6:f3:2a:31:10:0f:6c:93:f6:f4:9a:a9:f1:c0:84:
7e:61:b6:ff:9b:34:1a:23:9a:87:c4:a8:0e:18:2d:10:18:17:
f7:ea:16:4f:2c:1b:63:92:78:69:85:8f:65:60:b2:b2:2e:f3:
6e:87:14:8e:8d:e8:5d:e7:4b:3c:a5:3b:2f:fd:6e:15:ba:81:
3a:23:ab:3d:69:66:69:42:e1:96:bf:7b:49:df:85:89:cb:72:
2a:93:45:47:1f:df:f5:91:1c:8e:23:c6:9b:9f:06:d2:e6:11:
e2:65:7b:e5:ab:0b:43:5e:91:1d:c8:78:11:c3:ea:cf:ba:eb:
b8:8b:c1:4b:6d:c9:82:2a:e4:b5:b2:31:b8:73:77:97:60:2f:
5f:d0:27:03:d5:ba:28:38:0c:78:88:75:79:fc:6e:c7:80:5f:
2c:09:bc:d1:c5:d0:9b:bb:41:86:e4:bd:f2:c4:b8:0c:55:e4:
c1:2a:e5:b4:fb:69:09:ae:14:13:4a:63:04:f7:54:19:ff:f9:
4a:23:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:48 2025 by rpki-client