Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/08e6dc54-e1ba-3a9a-800f-fd7c0f521c9b.roa
File: 08e6dc54-e1ba-3a9a-800f-fd7c0f521c9b.roa (raw, json)
Hash identifier: 7bO4L+883C19KPtdPhbka8tlGgYLKPEfcLImbzL1vio=
Subject key identifier: 68:76:6D:24:04:8F:A9:C6:D9:96:84:E1:36:C4:7A:BC:22:A4:BD:EF
Certificate issuer: /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial: 010D0C9F432858480732B4294FB904FC065CBCA0
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/08e6dc54-e1ba-3a9a-800f-fd7c0f521c9b.roa
Signing time: Thu 28 Nov 2024 09:59:42 +0000
ROA not before: Thu 28 Nov 2024 09:59:42 +0000
ROA not after: Wed 26 Feb 2025 09:59:42 +0000
asID: 43260
IP address blocks: 104.245.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:32:b4:29:4f:b9:04:fc:06:5c:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
Validity
Not Before: Nov 28 09:59:42 2024 GMT
Not After : Feb 26 09:59:42 2025 GMT
Subject: CN=e879327a-5978-4ee7-8cd9-250cc0947343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:ab:1d:fb:7f:71:4f:a1:57:f0:89:cc:77:
d9:92:3a:9a:c9:26:a6:5e:c7:6c:37:16:4f:03:b1:
6f:29:ae:3c:d0:f5:b8:d7:0e:2e:cd:85:01:a2:6d:
53:f1:93:35:98:26:91:6f:dd:af:d1:d2:db:5b:3d:
1c:d2:a5:6c:0c:4d:f6:4b:7c:85:02:9d:fa:2f:ab:
02:e9:91:08:4c:5c:2e:f6:38:a9:a9:7b:a0:99:61:
90:03:e6:5d:76:bf:90:c0:ca:9a:04:e9:04:7f:8e:
18:78:91:a2:36:46:57:c7:5a:12:73:3b:8c:10:fd:
89:7a:d7:dd:a0:57:35:7b:86:84:f5:36:d8:51:4e:
db:e4:8e:0d:69:3a:49:f3:1d:c1:28:99:12:13:c0:
79:c6:f6:70:ab:57:ea:62:8a:3a:2c:5f:a4:3e:ca:
ff:a9:cb:7b:8e:b1:b5:cc:1c:92:70:73:61:91:d2:
8d:aa:65:8d:74:02:eb:4c:25:c5:b0:05:58:bc:40:
44:52:1c:77:63:b0:4f:9f:90:0d:08:42:c3:45:32:
8f:ad:85:5f:31:53:d6:7f:ac:62:92:f4:0c:ab:4d:
60:41:47:ca:fe:22:72:2b:d2:55:e5:cf:1a:94:7b:
19:bf:e7:45:51:77:35:14:41:2c:e3:94:16:d2:33:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:76:6D:24:04:8F:A9:C6:D9:96:84:E1:36:C4:7A:BC:22:A4:BD:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/08e6dc54-e1ba-3a9a-800f-fd7c0f521c9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl
X509v3 Authority Key Identifier:
keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:b0:70:bc:3b:8e:8d:d1:d8:81:80:89:1f:38:f9:13:9e:75:
29:23:08:f2:84:76:43:7a:74:38:0e:15:07:23:27:6a:45:09:
ff:8a:3e:3f:69:9d:29:aa:cb:df:1b:11:b9:0d:22:97:b7:42:
d3:38:58:d4:7c:8f:6f:92:78:bf:d2:55:07:5a:48:e2:d9:c5:
09:3d:10:34:51:c5:81:9b:80:00:2e:be:a9:27:5f:40:39:aa:
2f:60:a0:ce:bd:42:ce:94:03:dc:cb:b9:22:e0:6f:08:6d:94:
35:97:dc:36:10:2c:b3:b7:91:55:f2:5a:ab:05:61:68:3f:c6:
8a:f7:4f:f8:a7:00:b0:53:ef:2f:e7:22:35:7a:a7:88:b6:49:
1a:05:07:83:85:bc:d0:24:e4:e4:9f:19:01:88:53:fa:83:16:
31:da:cd:d0:1d:dc:07:50:cc:fc:1c:53:f2:e5:ad:8b:71:81:
f5:b9:ca:2d:8b:cc:d0:58:73:85:97:da:d1:b4:16:11:0b:1f:
73:e9:ae:82:c3:d1:fe:ee:ee:8c:42:b0:10:2e:00:fc:99:27:
2c:76:95:f7:81:bb:24:92:52:a6:df:35:28:20:b5:35:e5:62:
34:e5:c2:a0:62:23:fc:60:1e:46:d7:30:38:a3:69:9e:f2:75:
66:e0:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:35 2025 by rpki-client