Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/8f357100-fd11-31ae-b13c-47f46a45bbcf.roa
File: 8f357100-fd11-31ae-b13c-47f46a45bbcf.roa (raw, json)
Hash identifier: GGrJMDg5Qj9huuAamCFWH0vgzDqPFiw5VAItB/awOWY=
Subject key identifier: 39:64:22:AA:4C:CB:7F:7E:E5:D8:E4:47:EA:57:EF:AE:49:8B:28:AC
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F4328583FDB1F61508969F46320D3A700
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/8f357100-fd11-31ae-b13c-47f46a45bbcf.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Sun 07 Jan 2024 05:00:00 +0000
asID: 1
IP address blocks: 104.167.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:db:1f:61:50:89:69:f4:63:20:d3:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2024 GMT
Subject: CN=5854df83-4d09-4e6a-b72b-6db25be2920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:e1:6e:0c:64:be:01:45:6d:29:6e:73:db:
f7:9b:27:e6:6b:3c:a9:5e:f0:47:71:16:a1:fa:d2:
5c:3f:6d:db:64:21:82:9f:e8:e3:f9:39:59:f3:9b:
8d:9b:c1:d9:1d:69:93:dd:00:fc:33:29:2b:ff:a3:
d6:ab:ae:69:d3:ba:84:e3:23:b8:72:c8:64:48:10:
ec:95:e5:7d:0d:e9:2a:48:2b:24:70:b3:5c:22:76:
c9:9a:ba:73:16:ef:6e:8d:a0:25:a6:e1:26:8b:e6:
ae:e8:54:e4:f3:34:53:35:80:e7:db:3d:1a:f6:d0:
24:a0:ef:49:54:bc:de:5a:15:48:f3:fb:da:0d:c4:
ca:8f:51:e1:7f:26:5b:02:fe:4a:75:65:e2:bd:b2:
ce:78:3f:75:22:6e:32:ba:fe:4f:85:29:b2:f6:9f:
ab:ae:d1:5e:df:b2:07:4b:71:33:2e:46:3d:fd:be:
96:47:70:e2:80:cb:9d:61:d0:ab:cc:c4:be:2e:6c:
90:15:c2:02:85:70:62:43:5e:f4:33:5e:7f:e9:ee:
9f:00:84:4f:fb:be:d5:fe:ce:d6:56:76:9f:d5:23:
5d:d6:f2:73:35:4d:9f:04:5d:75:22:7e:6a:8f:11:
a2:f1:4c:d4:31:c2:b9:9e:a7:9b:9e:36:c1:74:0e:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:22:AA:4C:CB:7F:7E:E5:D8:E4:47:EA:57:EF:AE:49:8B:28:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/8f357100-fd11-31ae-b13c-47f46a45bbcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:11:86:7c:ab:43:49:61:81:8c:3b:ef:9a:45:95:f9:bc:44:
76:32:db:69:5c:62:47:1b:f9:30:04:1d:b8:61:d5:45:2a:03:
b4:82:94:d1:49:d2:9d:1c:cc:81:f7:70:49:fb:df:d8:4e:45:
d2:12:00:40:8e:17:21:e4:a6:d6:4d:79:6e:f8:b5:16:1e:be:
cc:2f:bc:bd:4d:1d:e4:66:f4:b1:1c:4c:7b:38:3d:9b:b6:1a:
53:9d:de:8e:5a:94:a5:bd:23:0d:c8:25:71:0f:01:7b:21:44:
fa:24:09:96:dd:f8:d8:b6:14:70:4c:cb:3c:4f:b8:a9:af:d9:
ad:3a:ce:a5:9b:ce:1d:ee:72:60:9b:b5:0d:cb:42:4d:9e:5b:
55:bf:26:aa:45:ed:1f:e3:ac:e7:7f:4c:b4:4a:b8:f6:5e:5c:
a8:b3:6a:f0:ca:74:61:84:06:2c:ce:28:0c:7b:44:34:d4:6a:
2e:49:93:f3:a4:f6:4b:24:56:67:5f:df:e5:5e:23:5b:a2:b5:
4d:f9:c3:e0:c7:80:e2:cb:19:43:cb:56:af:6f:fa:84:54:2e:
78:03:eb:c6:31:0d:ee:af:b2:64:b4:8c:c8:af:af:cb:86:fb:
f6:51:75:06:dd:a5:bf:ee:33:4b:f1:3c:d8:d5:db:43:cf:64:
3d:62:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:10:57 2025 by rpki-client