Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/20242b7a-9858-399c-9221-6362311f1c46.roa
File: 20242b7a-9858-399c-9221-6362311f1c46.roa (raw, json)
Hash identifier: WFVtQJ/wvcjA7sCJfOeZMsiFGgTcxsFF4uubXEk90f8=
Subject key identifier: 20:A8:22:4F:59:DC:2D:08:71:AC:50:01:AD:24:C7:1B:6D:B0:88:3E
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328584309FEA982411C598A23FC0740
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/20242b7a-9858-399c-9221-6362311f1c46.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 104.237.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fe:a9:82:41:1c:59:8a:23:fc:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=02dad6c2-7d93-48d5-963e-74b9d725ba8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:44:47:89:70:4f:2a:b5:3e:30:c1:db:9f:
2b:3e:3e:fd:51:f6:7d:98:fe:df:da:84:ad:26:71:
83:0c:f2:2f:20:79:43:fa:7b:6c:7f:55:6c:c2:b5:
39:b7:1e:f1:90:f4:00:b9:41:33:f5:ea:06:de:ec:
2a:c5:58:cc:52:6e:f4:5e:b1:a3:23:29:63:43:5b:
09:10:7a:b5:66:0f:92:b3:4b:1f:fa:f6:d6:c3:94:
da:2c:82:ed:44:33:eb:fe:4e:6c:aa:8b:6b:c8:c6:
d9:8d:3f:b5:54:0f:2b:6f:c4:cf:1e:44:73:c4:83:
99:c6:7e:55:b0:ad:cd:5d:0d:42:53:f4:92:39:96:
9e:b5:19:db:0c:b3:3c:f0:e6:5c:f3:86:53:f2:7b:
80:e3:a4:ed:13:b0:ea:2e:c5:13:70:79:15:62:f1:
ae:0f:78:9e:9f:6c:d6:98:d9:54:28:df:39:af:80:
0a:0c:61:18:3e:07:93:8a:c9:bd:20:be:88:9c:b5:
14:fc:4a:5a:e6:9a:eb:be:1e:25:73:57:15:11:1a:
79:8d:7f:30:7d:3d:0b:94:9c:68:2d:53:4d:46:44:
04:ef:74:a0:c7:ed:ee:52:3e:e3:0b:ab:e0:e6:00:
47:3f:ba:db:fb:e2:0e:34:80:25:c3:06:3c:06:b1:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:22:4F:59:DC:2D:08:71:AC:50:01:AD:24:C7:1B:6D:B0:88:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/20242b7a-9858-399c-9221-6362311f1c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:f4:7d:d2:5a:c0:5d:19:26:5e:24:53:72:a4:72:f7:49:fc:
88:b5:3e:36:82:ac:98:1f:20:a4:de:30:21:a2:8e:dc:f5:8d:
cd:d8:8b:bf:a9:50:a8:2e:59:a2:7c:82:2a:c6:3b:3f:8c:a7:
66:70:bd:03:1c:1f:d2:1e:b5:34:6e:d3:59:5a:dc:cf:3b:23:
e8:5c:b3:04:9e:72:22:8b:db:f6:db:a7:8a:b3:50:bc:be:a7:
8e:23:fc:02:25:99:35:53:7c:6e:22:03:0c:0a:06:59:16:ae:
61:df:fb:b3:ae:87:26:fd:ad:c9:35:44:53:70:a2:cb:6b:3b:
13:9a:2d:f5:ec:90:0f:34:32:4b:39:ab:38:61:be:91:88:6b:
49:1d:39:e1:b7:4f:3c:3a:c8:4c:8a:6f:ce:0c:88:63:c6:18:
7c:25:2a:62:f5:8d:0b:00:8f:de:65:87:f5:9a:62:bc:7e:d7:
fd:9f:30:ea:2b:51:b3:e6:97:f7:cf:48:a2:6b:f1:1e:9e:21:
de:fa:74:90:8e:21:dd:1f:d6:a0:00:c8:09:66:60:5b:df:0f:
be:27:5e:43:4d:2f:35:cb:28:45:b5:7e:f9:bf:e6:a8:c2:f9:
c5:f1:72:98:70:f4:9d:10:a6:3f:83:0d:ab:be:3b:e4:36:d1:
4a:35:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:20 2025 by rpki-client