Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dcbc2cf0-03b2-3b9c-ae72-5beb964efc5b.roa
File: dcbc2cf0-03b2-3b9c-ae72-5beb964efc5b.roa (raw, json)
Hash identifier: Bp0XQo01D5frxRDLnlZkSfWnPpSRYYvLOXgqW1jHYik=
Subject key identifier: 02:A8:BA:BD:9A:0E:F7:79:63:44:1F:BC:90:17:30:58:4C:81:4E:6F
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584644D259D8A358078107EBBB80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dcbc2cf0-03b2-3b9c-ae72-5beb964efc5b.roa
Signing time: Thu 20 Jun 2024 02:11:49 +0000
ROA not before: Thu 20 Jun 2024 02:11:49 +0000
ROA not after: Wed 18 Sep 2024 02:11:49 +0000
asID: 834
IP address blocks: 104.224.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:44:d2:59:d8:a3:58:07:81:07:eb:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jun 20 02:11:49 2024 GMT
Not After : Sep 18 02:11:49 2024 GMT
Subject: CN=bc2ff7be-2b04-49ce-9403-83363ded810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:80:3e:d4:1f:58:90:35:3f:cd:50:24:7c:
21:e6:56:32:b3:d0:f7:6a:a1:c5:b2:65:48:27:97:
a9:74:11:6d:f1:67:d9:e6:86:2c:f6:78:31:4e:c9:
ba:90:fd:1b:d4:52:b0:0f:7c:82:7d:e9:b9:69:10:
b1:21:87:5c:ec:63:38:8a:d0:31:e4:60:e2:af:6b:
63:53:61:3e:d8:ed:9d:e2:08:0a:74:ea:63:8e:1a:
20:57:34:13:94:1b:c8:d5:2a:c7:f4:56:fc:af:bc:
76:b3:eb:f1:06:05:74:39:61:7c:9c:f5:d5:65:68:
fc:4c:85:ef:62:0b:f7:8c:f3:34:46:4b:66:ee:fe:
1c:1d:34:15:a1:fc:fb:89:73:c9:b3:20:b4:9b:c8:
f8:72:c2:3a:1e:39:c0:60:91:b7:d0:2c:fe:44:fb:
69:64:fc:57:55:32:24:04:ad:96:72:69:62:60:d5:
34:dd:30:92:f3:b7:b8:21:46:50:db:93:ec:b5:fd:
7f:0d:c6:d5:5f:a9:ab:89:81:f8:0f:8c:12:65:dd:
95:a9:c4:ba:c4:1f:8f:7e:80:a0:81:08:a2:65:ca:
7f:cb:ea:e8:10:b8:ab:9b:1b:1a:22:0b:03:ac:e7:
6e:e1:d6:1b:8c:d6:4f:84:bf:c5:af:d2:56:9b:fc:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A8:BA:BD:9A:0E:F7:79:63:44:1F:BC:90:17:30:58:4C:81:4E:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dcbc2cf0-03b2-3b9c-ae72-5beb964efc5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
104.224.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:95:79:8d:0d:40:8e:8d:ef:fc:8c:d4:a9:90:8c:54:05:68:
fd:c9:27:0f:85:24:ea:17:f7:99:c8:65:43:61:1b:ca:77:18:
bc:1f:9c:d7:87:26:02:78:ea:d8:48:dd:fc:8d:e3:cb:f5:b6:
2d:3e:2b:0c:59:c3:b0:c2:17:66:41:ae:bd:3f:9e:f6:04:5d:
77:79:a1:7b:ca:d6:84:f4:a9:83:95:0a:bb:e4:33:5c:ca:8e:
24:14:e1:3d:24:28:5f:25:78:1d:65:f6:23:9d:41:84:48:a8:
c2:d0:63:38:f2:85:b4:d4:1e:a3:01:a9:3d:a0:a6:79:83:8b:
8c:4f:1b:a3:d1:08:3d:4a:51:4d:6f:04:1b:2c:ce:f3:0b:16:
ef:5d:c0:cf:ea:b4:95:23:70:5a:b5:9f:48:a2:4e:a3:ec:0d:
56:56:fb:fc:c6:87:a8:f2:ff:44:e3:34:35:d6:c1:ca:80:dc:
25:36:f3:1d:9a:ba:f7:3e:43:84:36:3a:38:d9:a3:06:be:08:
f3:72:af:9a:3d:d0:cb:01:fb:be:e3:9c:54:12:19:db:50:a6:
e6:c2:36:e6:a4:6d:83:03:19:f5:71:d0:62:4c:9e:fe:60:d4:
de:e1:13:e3:8d:56:43:5d:bc:27:f2:21:ff:aa:40:58:76:68:
90:03:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:22 2025 by rpki-client