Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffd1ab00-620f-39fb-9ac8-7e94d0e356fc.roa
File: ffd1ab00-620f-39fb-9ac8-7e94d0e356fc.roa (raw, json)
Hash identifier: Lx5NxfSHyItELewWp/7naIlvPlXlPByNtOSjfoyJ8qE=
Subject key identifier: 08:32:D6:88:D2:1E:E8:DC:2D:15:04:89:BA:AE:FF:A6:32:91:6A:98
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285847F6D8D0C5AF442DAA4A66AEA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffd1ab00-620f-39fb-9ac8-7e94d0e356fc.roa
Signing time: Fri 22 Nov 2024 13:25:40 +0000
ROA not before: Fri 22 Nov 2024 13:25:40 +0000
ROA not after: Thu 20 Feb 2025 13:25:40 +0000
asID: 400859
IP address blocks: 104.253.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f6:d8:d0:c5:af:44:2d:aa:4a:66:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Nov 22 13:25:40 2024 GMT
Not After : Feb 20 13:25:40 2025 GMT
Subject: CN=5ac9d549-bd42-440f-982e-d077c1dca2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:fe:74:a8:2f:cc:75:78:6c:d5:56:d1:26:
a7:07:fb:82:a8:dc:e0:bc:98:30:d2:39:7b:dc:0a:
6b:f6:be:26:0f:5c:dd:85:ea:bd:8b:71:64:00:e0:
fe:56:fa:82:13:9e:a4:05:c4:c0:fb:f2:9f:6f:8c:
54:8d:0b:42:e9:42:87:6a:d3:37:4a:10:3c:e4:52:
1a:a4:a8:3d:77:cb:fd:e0:50:e6:a7:07:52:ef:7e:
7e:93:c3:50:a9:23:6b:66:84:65:a1:5b:c3:cb:a1:
7a:9c:73:91:1b:8e:4c:02:d7:b5:35:f8:d8:8d:30:
1e:82:bf:a2:50:a2:7e:ba:00:f5:93:a4:fc:ee:9b:
b0:40:7c:01:02:0b:41:8e:13:c1:1d:19:6f:f5:00:
43:b4:30:ad:c9:30:cf:75:60:fe:ef:7d:3c:ee:18:
dc:dc:4d:1d:9b:da:74:17:3f:d9:3c:a2:d9:bd:25:
57:ee:6c:e6:da:0a:52:b1:68:ef:05:15:d9:c8:c2:
60:f8:4a:a5:3a:e7:9f:7d:cb:20:59:5a:77:7f:c3:
88:d2:a5:f1:2b:3d:5e:d9:8c:ea:03:0e:72:06:c3:
1e:0f:6a:80:50:cd:cc:71:da:a6:9f:f2:fd:36:43:
7b:dc:53:21:52:6d:c4:77:38:09:25:ac:95:9a:b3:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:32:D6:88:D2:1E:E8:DC:2D:15:04:89:BA:AE:FF:A6:32:91:6A:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffd1ab00-620f-39fb-9ac8-7e94d0e356fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:2e:16:17:bc:28:15:e4:0b:68:9d:21:40:54:cb:34:b1:05:
70:99:88:0e:6c:2a:90:c1:35:66:65:f0:c5:0c:e7:ca:8a:69:
48:8b:1f:03:b5:f5:b9:9a:50:5f:41:2e:81:74:0d:80:52:9d:
4b:6d:8e:31:c1:36:53:a4:c0:9d:28:7e:67:66:6f:1e:3f:1f:
da:2c:3c:98:5b:56:84:18:d0:02:c6:ad:89:8f:ca:d8:4e:55:
55:61:21:da:d0:a0:90:07:da:09:9a:3d:6c:c5:b1:4a:d3:1e:
a3:8c:54:35:f4:61:58:71:bb:6c:9d:84:e4:69:c8:76:98:13:
26:27:7f:2a:4b:dc:06:39:e7:3e:45:1d:98:8f:83:43:71:e1:
f9:57:c1:a3:fb:e1:0d:90:98:6c:61:58:5f:79:1d:8e:28:91:
3d:56:28:37:50:7f:41:c1:20:f4:cf:9a:67:09:57:48:2e:d5:
bc:6c:5e:88:2d:c3:ed:d6:10:ab:63:4b:38:b4:6c:b3:01:fa:
34:40:cd:af:4a:06:90:25:f7:1e:5d:da:43:42:2c:eb:2c:1d:
19:60:5c:62:f2:5b:15:25:be:25:ad:94:40:63:84:a2:e7:bf:
c0:be:39:be:74:03:ac:53:90:c4:1c:16:c7:aa:0f:0b:0d:70:
2b:64:3e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:40 2025 by rpki-client