Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/d3aa01c1-f830-3916-9198-7a52e0fa7c7a.roa
File: d3aa01c1-f830-3916-9198-7a52e0fa7c7a.roa (raw, json)
Hash identifier: D/hN1EtOBYypDuUn/SAGXc2byk3c4PtVY2n76C1da9o=
Subject key identifier: 3F:69:5D:2E:E0:FB:08:B2:C2:54:46:65:FB:E2:11:65:2E:4C:BA:45
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858430FE9CFA8EB1487B1FB5F7920
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/d3aa01c1-f830-3916-9198-7a52e0fa7c7a.roa
Signing time: Thu 31 Aug 2023 01:00:22 +0000
ROA not before: Thu 31 Aug 2023 01:00:22 +0000
ROA not after: Wed 29 Nov 2023 02:00:22 +0000
asID: 55154
IP address blocks: 104.223.2.0/24 maxlen: 24
104.223.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0f:e9:cf:a8:eb:14:87:b1:fb:5f:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Aug 31 01:00:22 2023 GMT
Not After : Nov 29 02:00:22 2023 GMT
Subject: CN=60617744-b94e-4f27-8a6d-6f26e4199423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:5f:2a:65:4a:d4:91:f5:90:b5:c2:bd:f5:
c9:f2:0c:e7:05:a8:bf:0b:56:07:0c:7b:e3:04:68:
94:91:9e:9f:64:7b:30:b2:55:88:3a:5c:4c:96:89:
c8:99:bc:c5:de:d8:8f:cc:b9:f1:12:01:d4:8d:91:
39:99:ab:03:d5:c8:a6:cc:f7:11:85:c5:ba:a9:5e:
5a:0b:98:db:e4:5f:02:6e:3b:24:20:13:86:ab:f0:
f3:78:c3:75:fd:aa:5f:05:04:d6:43:f5:99:aa:51:
8c:8d:62:41:ee:00:8e:ae:e7:38:b5:34:18:89:b7:
6d:0b:a6:7a:74:79:0c:87:25:ab:61:25:ec:59:0a:
f6:83:a3:eb:79:8c:2d:34:9f:e9:0b:bd:28:80:03:
ba:e9:a0:3d:89:39:13:4c:6d:84:66:58:e8:6f:17:
1a:28:de:b7:cb:f2:7d:bd:e9:ee:30:8f:25:4d:77:
73:02:d0:b2:5d:61:8a:68:ff:ca:bd:4c:ba:11:95:
dd:76:40:c7:ed:7e:a5:94:48:94:7f:67:03:a9:a9:
9d:30:e9:42:6f:30:2f:dd:a4:d8:3f:e9:65:11:cc:
69:03:85:39:bd:02:04:d7:91:2f:98:85:93:49:bf:
54:c3:d1:41:c4:f0:f1:4c:35:d8:ef:27:f5:ff:17:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:69:5D:2E:E0:FB:08:B2:C2:54:46:65:FB:E2:11:65:2E:4C:BA:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/d3aa01c1-f830-3916-9198-7a52e0fa7c7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.223.2.0/24
104.223.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:05:6c:21:82:74:b6:b1:9a:66:b4:cc:ab:98:e5:82:e6:e3:
6c:dd:1f:18:60:08:5c:b6:f8:2b:7a:11:54:7a:1a:ae:a1:c3:
2d:00:56:dd:9c:1f:a1:b4:72:0e:27:9f:68:95:b3:7e:56:d0:
b4:15:53:28:9e:81:85:2b:c5:6c:df:01:b7:68:3b:6d:1b:7e:
7c:be:5a:fe:4c:e6:2f:05:67:26:ff:65:4e:ec:78:9f:5e:12:
08:c8:d6:54:26:d4:88:0d:66:09:4a:b0:b7:84:48:94:57:b6:
18:76:f9:71:50:cb:a8:f6:34:f7:5a:aa:74:44:ba:12:ee:d5:
fc:2d:8c:97:fc:16:0d:a7:15:75:82:c2:d0:7d:4e:48:86:58:
e1:21:62:53:62:ff:f9:16:b5:ff:26:de:06:a1:7d:d8:81:39:
46:f3:3c:de:c5:86:9c:ec:4d:43:34:76:56:cc:11:f0:53:b7:
d1:3a:4c:aa:d3:e0:3f:a3:22:0b:6c:ea:1f:d1:57:16:ff:bd:
28:19:7b:18:5d:ea:c4:b2:b4:80:a5:db:d2:3a:ff:cf:75:0c:
10:fc:5d:d4:15:1e:18:66:db:87:eb:cf:4f:e0:e5:38:f1:30:
32:04:7a:c7:93:c6:ff:3e:e9:2f:4e:7e:94:a4:97:0d:6a:71:
98:1b:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org