Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9256680e-9af8-30d2-9e62-74ab2e29a220.roa
File: 9256680e-9af8-30d2-9e62-74ab2e29a220.roa (raw, json)
Hash identifier: 1+ABJncghmBKQNX1hLNH+AQ9W60zs+kEkE5fXkZ3zc4=
Subject key identifier: 8F:D3:78:7E:3F:7E:22:1D:0B:8B:67:A3:C9:C1:5B:1D:D1:11:93:00
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F4328583CA6142A2B8E453809C572CA00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9256680e-9af8-30d2-9e62-74ab2e29a220.roa
Signing time: Thu 07 Jan 2021 05:00:00 +0000
ROA not before: Thu 07 Jan 2021 05:00:00 +0000
ROA not after: Tue 23 Apr 2024 04:00:00 +0000
asID: 61317
IP address blocks: 104.156.151.0/24 maxlen: 24
104.156.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a6:14:2a:2b:8e:45:38:09:c5:72:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Jan 7 05:00:00 2021 GMT
Not After : Apr 23 04:00:00 2024 GMT
Subject: CN=d21df901-70bf-4eec-a9c0-a15f6aa5c871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:ef:75:dd:77:15:f5:f7:e2:46:f7:8e:2e:
0a:ba:67:04:16:05:88:1f:8f:2d:d4:69:c5:37:63:
ac:69:ee:f5:f5:fb:3b:1d:1c:22:ff:fd:14:90:8c:
02:82:51:51:8d:56:5b:56:44:b9:82:40:22:52:34:
9e:86:50:28:34:40:c9:ad:0c:4b:3a:da:31:a1:15:
98:46:87:a1:c4:b8:09:3a:02:05:01:39:98:79:6d:
69:7a:76:1f:e6:17:89:97:b8:d0:83:62:c7:1b:a3:
51:12:2c:d7:43:95:11:5d:ab:f1:d2:70:ed:37:b7:
75:65:91:6a:42:e8:ef:7a:3e:bb:8a:76:62:28:1b:
1b:f4:ce:81:26:68:02:52:48:84:a5:a5:5f:bc:18:
23:cb:fc:59:fb:34:d5:4c:fc:4b:88:ea:cf:fd:84:
a4:0c:7a:dc:ee:0c:46:88:47:df:f4:b3:ea:14:5f:
c9:b3:cd:81:51:da:b6:f8:f3:8c:92:c3:9b:fb:c1:
aa:8c:51:4a:92:c0:28:b9:37:55:09:6b:ef:5b:36:
21:0c:24:b6:e7:29:aa:cf:65:0d:74:a2:e0:f4:ac:
08:2b:3e:fc:ed:f3:1e:15:b7:64:1b:17:6d:7f:d3:
30:05:ec:e6:1e:62:0b:e8:59:c9:c7:d4:b5:c2:39:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:78:7E:3F:7E:22:1D:0B:8B:67:A3:C9:C1:5B:1D:D1:11:93:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9256680e-9af8-30d2-9e62-74ab2e29a220.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.149.0/24
104.156.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:fb:70:9c:2b:3e:ce:8c:79:92:85:37:a3:18:ab:62:12:e1:
3b:f0:25:84:89:b7:5b:cd:c5:f9:d0:22:74:f2:16:14:db:df:
1f:67:bb:b7:90:43:57:e2:f1:f5:9c:0c:d4:0d:7f:cb:7a:4a:
4b:69:0f:ad:71:b2:4e:a1:f3:c2:cb:28:b3:1a:05:da:10:9b:
ea:2c:57:7f:fd:71:4a:82:cf:8b:b6:cd:e0:2c:80:1d:26:a0:
71:3b:aa:ea:c1:09:06:cc:be:1f:55:53:9c:51:93:82:c8:96:
a5:41:9d:0b:b7:c2:34:c2:c3:64:6a:34:e9:27:c3:91:89:a2:
0b:0a:8f:25:18:95:25:14:6b:32:e0:7e:98:de:68:e5:90:1d:
0c:84:8d:4c:42:54:0c:97:cb:0e:45:dc:37:3b:99:7b:3d:5a:
55:a6:e2:40:86:4c:96:6a:af:4c:ee:a1:6d:95:a1:46:bb:a0:
56:bc:3a:e9:25:d5:0a:a7:60:4a:de:5d:8d:b4:dc:ad:ad:16:
90:54:ae:a5:fa:c7:3a:0e:60:8a:57:67:ba:3d:ad:62:7c:7f:
ce:2b:d8:b9:1b:28:ed:db:ee:77:c3:d3:27:bc:7d:fe:bb:82:
62:4a:b7:fe:3e:a3:fe:b2:d1:db:1b:80:eb:3d:4d:a4:ab:be:
ea:39:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:16:41 2025 by rpki-client