Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4012e252-64a0-34cd-9e38-d5efae9e8f2b.roa
File: 4012e252-64a0-34cd-9e38-d5efae9e8f2b.roa (raw, json)
Hash identifier: P1CQequxhg5AopRN2gitWOkJDtEqiRmIlLVp1FN++CU=
Subject key identifier: 7A:A0:A0:5A:E5:11:0A:34:61:DD:D6:15:1B:C2:BD:87:C7:34:A6:49
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858486C960778BF89E82EE58EFCE8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4012e252-64a0-34cd-9e38-d5efae9e8f2b.roa
Signing time: Fri 03 Jan 2025 17:36:29 +0000
ROA not before: Fri 03 Jan 2025 17:36:29 +0000
ROA not after: Thu 03 Apr 2025 16:36:29 +0000
asID: 49367
IP address blocks: 104.252.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:96:07:78:bf:89:e8:2e:e5:8e:fc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 3 17:36:29 2025 GMT
Not After : Apr 3 16:36:29 2025 GMT
Subject: CN=80438829-bbb5-4b8f-bb34-51d357a6a990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:cf:48:93:20:45:65:69:1a:ea:e3:91:0e:
70:ec:39:5e:b0:21:b7:47:62:d5:32:8a:1b:13:55:
2d:fc:79:16:88:13:1f:63:49:8d:48:e3:10:e5:9a:
4e:a4:dd:9f:87:40:e2:b3:17:b4:55:5f:6e:af:32:
4c:f4:49:35:c9:48:17:04:c7:fd:d7:3f:58:75:7f:
51:43:11:e1:50:be:ea:45:1c:7a:a7:09:12:f3:8f:
bc:0e:af:9e:7b:bf:5d:3b:c0:2b:7e:6b:0f:15:10:
0d:1b:46:9c:1f:05:34:f1:3a:1c:d5:59:a2:bc:64:
b4:9d:64:19:51:84:9a:70:c0:c3:cf:43:c6:20:0e:
ed:09:20:f6:c2:ab:69:80:8d:42:f8:41:e7:21:91:
30:aa:75:d0:d7:84:c3:75:c2:2b:18:88:a6:33:c3:
ec:dd:70:c3:42:f5:86:c4:ed:8f:c9:e3:7f:56:68:
db:7b:7d:68:32:ac:7a:b8:b5:31:46:9e:3f:9e:07:
bf:1e:ff:41:3f:ec:f1:d0:29:d4:94:6b:3b:6b:4d:
2c:52:71:89:3a:30:a6:24:7a:26:9d:9e:a9:0c:fe:
30:47:fe:84:6f:0f:15:be:d9:d3:ee:be:29:2f:a9:
d7:8e:46:f9:d8:a6:e4:6b:a2:ea:54:ac:58:d9:11:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:A0:5A:E5:11:0A:34:61:DD:D6:15:1B:C2:BD:87:C7:34:A6:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4012e252-64a0-34cd-9e38-d5efae9e8f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:c1:93:11:0c:a3:26:cb:69:32:af:7a:e6:8f:a0:f8:a1:d7:
31:ef:6a:ed:6d:b1:91:15:c4:bc:7c:ca:fe:eb:31:e4:b8:dc:
6c:85:69:7b:8e:b0:65:04:37:95:5d:9e:bd:3c:99:d0:b8:9c:
df:31:3e:53:82:2c:1b:44:97:2b:2d:ce:c6:e9:73:f1:52:eb:
be:c1:d4:57:3b:3e:f7:3f:e0:39:5b:46:07:4b:50:48:aa:cc:
68:bd:2c:8f:a1:81:2c:72:30:4f:af:26:4b:56:7c:e9:67:b5:
03:65:73:1b:72:78:75:8e:33:87:7b:06:2d:40:ef:98:e8:28:
e6:9f:91:96:d0:8f:5c:6d:5e:8e:82:e7:f1:89:17:4a:ed:06:
92:92:8c:d5:9d:18:e3:e9:08:cb:6f:42:ff:20:d7:cd:6b:e0:
bc:76:6a:1c:e0:1d:a3:a0:37:6e:da:9e:84:c5:04:b2:31:e1:
4d:36:6c:4d:2b:53:db:97:43:1c:70:76:62:47:44:ce:d3:e6:
c6:55:01:62:f5:ca:c0:48:a9:13:43:53:22:9c:71:99:be:ac:
96:4f:21:dd:21:ad:09:bd:52:81:a8:98:6e:34:e8:d5:28:1f:
87:a3:12:11:00:1f:21:be:c4:88:bd:9a:53:e8:6a:f6:3c:d0:
67:c7:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:05 2025 by rpki-client