Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/780d4a0d-5fb6-3bfc-8ca7-f21845f85d7e.roa
File: 780d4a0d-5fb6-3bfc-8ca7-f21845f85d7e.roa (raw, json)
Hash identifier: TzJXEe26FW5dg4zUE4v/EsfigZ5gvXGBuOEcJ11qfj8=
Subject key identifier: 80:31:13:7A:40:8A:CC:68:A0:ED:68:54:53:0E:D3:D6:08:59:23:83
Certificate issuer: /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial: 010D0C9F4328584792D65DCEB3EADCD943525C40
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/780d4a0d-5fb6-3bfc-8ca7-f21845f85d7e.roa
Signing time: Thu 17 Oct 2024 17:39:53 +0000
ROA not before: Thu 17 Oct 2024 17:39:53 +0000
ROA not after: Wed 15 Jan 2025 18:39:53 +0000
asID: 393653
IP address blocks: 104.128.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:92:d6:5d:ce:b3:ea:dc:d9:43:52:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Validity
Not Before: Oct 17 17:39:53 2024 GMT
Not After : Jan 15 18:39:53 2025 GMT
Subject: CN=4083d559-390a-4e39-b7b7-cbe4f2516b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:75:e9:d2:ab:9b:69:25:7d:b8:d5:95:43:ef:
8f:7c:5f:98:9b:b3:a3:37:2c:d6:94:ec:b7:22:71:
d4:90:d7:66:eb:4c:5e:b3:40:33:6d:3d:80:cf:b4:
53:65:01:96:3c:31:65:d5:b3:d0:24:a7:ad:a9:45:
71:46:0d:d6:d4:63:89:ac:1b:74:dd:3e:9a:a6:dd:
84:96:fa:9b:c9:82:bd:88:a0:13:29:82:ca:2b:2a:
19:68:e1:25:e1:aa:8c:cd:04:32:78:3a:7b:11:66:
8e:94:28:b7:e6:2b:4a:c7:7e:d5:47:da:4d:c3:3d:
da:3b:16:30:a1:4c:b7:15:e2:bb:a3:97:1e:9b:11:
fc:dd:2c:ef:ba:e9:12:5b:b3:63:c7:13:eb:9e:fa:
f7:44:a4:10:0e:a4:97:bf:ef:42:08:4d:1e:ec:7c:
ad:e1:32:df:31:32:0a:d9:3a:92:9d:ed:91:df:de:
27:c8:28:e7:07:4b:d2:3f:37:3b:9b:70:e7:43:9f:
71:f2:5d:18:2c:32:36:28:73:9f:b5:4c:39:9b:47:
5d:f0:12:4e:45:ba:87:63:30:8b:15:e6:e6:67:a8:
94:83:72:95:cd:4e:d9:a5:3a:7c:fa:ff:d4:61:a8:
37:59:55:2a:c4:34:62:eb:4f:f4:a3:93:68:13:6e:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:13:7A:40:8A:CC:68:A0:ED:68:54:53:0E:D3:D6:08:59:23:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/780d4a0d-5fb6-3bfc-8ca7-f21845f85d7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
X509v3 Authority Key Identifier:
keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.128.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:c0:d5:f7:bb:d7:04:fb:b4:fe:09:74:97:3e:a5:2e:fe:0e:
a6:8f:a5:94:f0:e7:98:76:ed:5f:13:a6:d0:ad:05:ed:71:2b:
d3:ad:66:2f:6c:78:79:35:3e:5f:83:51:e3:b9:92:70:f5:56:
5a:d6:53:65:b0:a1:dd:9b:33:11:37:06:33:f0:10:7e:56:0b:
d4:6b:78:cd:12:20:69:43:0e:75:66:f6:a4:21:53:cc:65:ee:
d2:c7:de:ec:7a:b7:20:f7:5d:33:d7:90:06:61:d9:ba:fd:b8:
0a:c8:3a:e4:4c:58:e1:bd:93:cf:20:b0:5d:9e:1d:14:0d:33:
f7:6a:36:14:fe:c8:7e:dd:ba:e6:f9:d6:a2:f4:c0:cc:ad:e4:
cf:6f:d0:86:68:60:59:8f:cf:30:2e:e1:1c:ef:29:db:d3:cc:
46:4f:dc:d5:17:88:7b:bd:19:76:43:da:e2:61:34:5f:19:92:
7a:67:53:ac:9e:28:24:d7:43:d4:c5:fd:2c:18:00:d8:5a:8d:
7e:41:43:a6:14:88:7d:02:e1:80:c2:1b:99:a0:d8:0c:c6:18:
c1:80:3c:f1:34:1b:54:4b:9d:fc:29:9d:86:e0:50:66:c9:37:
dc:9a:ae:a5:b3:77:15:d6:de:db:77:ba:d3:4d:52:be:e3:fe:
fd:a4:ca:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:26 2025 by rpki-client