Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/827ba95e-e655-3eb9-a0ac-0e70df2a8344.roa
File: 827ba95e-e655-3eb9-a0ac-0e70df2a8344.roa (raw, json)
Hash identifier: RN7jdY/LZ/3kBXqTijvOIZ3Azi6edR/NUhVW3JNCyIA=
Subject key identifier: 5F:FA:96:4C:AB:64:99:4B:97:76:B9:4A:D1:A3:D8:04:05:08:45:E1
Certificate issuer: /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Certificate serial: 010D0C9F4328583826088858157674670FCD3400
Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/827ba95e-e655-3eb9-a0ac-0e70df2a8344.roa
Signing time: Tue 01 Dec 2020 05:00:00 +0000
ROA not before: Tue 01 Dec 2020 05:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 135356
IP address blocks: 104.171.238.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:26:08:88:58:15:76:74:67:0f:cd:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Validity
Not Before: Dec 1 05:00:00 2020 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=4fd95ed5-6ae9-407f-8f5a-531e2f6a8e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:27:b2:57:4b:88:c7:61:4b:62:a5:ba:e3:
d9:f7:73:2c:5e:c7:5a:e9:b5:c7:c8:ad:8d:7a:49:
05:e3:ca:b3:24:83:02:3e:3f:45:90:53:55:6c:e1:
a4:76:34:19:93:13:ab:01:db:09:b7:e9:6e:f8:4e:
4c:0a:e2:3b:24:5d:2f:28:96:c1:1a:34:8e:de:c0:
09:d1:80:fd:84:34:a1:ec:ae:c9:25:88:a6:f4:3c:
6a:c8:d7:2c:01:ac:36:bb:17:c7:93:21:cb:93:d4:
a0:53:1d:36:f9:d0:a4:9a:dd:cf:cd:85:49:ef:76:
9c:eb:16:36:5f:4e:1c:81:89:72:19:6a:94:4e:11:
df:6e:83:a5:47:52:06:db:ce:52:3a:da:90:56:29:
01:dd:2c:d3:bb:9e:39:d0:71:98:12:54:28:34:05:
19:37:c0:05:61:6d:87:06:a4:05:ee:dc:17:b6:48:
ee:ce:c0:99:d8:8e:ee:eb:db:99:0a:09:72:eb:ea:
cc:dc:3b:ab:65:e8:61:95:4c:ea:b7:00:cc:7b:1e:
58:b3:30:2f:a7:d1:40:ac:2e:61:01:85:46:f8:a3:
ed:19:b1:f7:79:36:69:37:59:82:a9:e9:14:62:1c:
76:6d:f0:fc:26:09:c9:43:20:33:4b:28:14:bb:b3:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:96:4C:AB:64:99:4B:97:76:B9:4A:D1:A3:D8:04:05:08:45:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/827ba95e-e655-3eb9-a0ac-0e70df2a8344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl
X509v3 Authority Key Identifier:
keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e5:ea:3d:11:81:0b:8d:2e:da:58:e1:b9:ef:4b:67:4a:ed:
56:00:b5:ab:88:86:d8:63:89:b8:aa:b9:a9:b1:67:8f:72:48:
f1:5b:b1:b3:24:1b:a7:7e:9e:3b:62:b9:e7:39:8b:d4:68:c9:
9d:21:74:62:e4:26:46:d6:a5:95:05:88:b6:d7:04:76:54:2c:
98:6d:b4:0b:09:08:ce:54:47:88:89:e4:d5:3f:cd:27:55:43:
a1:a3:e1:88:8d:dd:4f:b2:b4:b5:27:5e:d1:95:f3:c4:dc:1a:
af:9a:30:c5:49:bb:2d:82:f0:67:74:27:fd:8d:db:a5:61:b2:
42:14:e3:2e:e0:f4:94:f5:b5:28:3a:6e:0e:ea:ca:42:3f:73:
d4:45:49:14:1b:92:35:2d:75:77:e9:be:74:e8:2e:58:3e:81:
e6:ca:eb:e9:62:2c:86:80:46:0d:72:2a:39:4b:ab:d4:51:6a:
48:18:6d:e0:13:8c:36:9d:2a:d5:8c:2c:ad:12:52:23:5a:c7:
7d:07:b4:b1:22:41:d9:8a:ce:54:7a:5b:d3:99:3a:bf:e1:fc:
3f:8a:f1:ea:93:6a:9f:31:d9:db:e9:8a:87:c3:cb:45:a5:25:
d4:ed:2d:dc:2d:db:80:f2:df:5e:29:08:69:1d:42:cc:95:87:
4f:9b:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:01 2025 by rpki-client