Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/95fd9d1d-c2f7-39cc-bd16-6a8e5e073753.roa
File: 95fd9d1d-c2f7-39cc-bd16-6a8e5e073753.roa (raw, json)
Hash identifier: HZTB9qxSMDEoWcpMS+oCUCjA2kOqIWyfZxeOKnlsv4E=
Subject key identifier: A5:46:53:AE:86:0E:E7:2F:18:E9:DB:7A:B6:C6:D6:0B:C4:D9:6C:25
Certificate issuer: /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial: 010D0C9F432858480733211453344E30BDA88180
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/95fd9d1d-c2f7-39cc-bd16-6a8e5e073753.roa
Signing time: Thu 28 Nov 2024 10:00:34 +0000
ROA not before: Thu 28 Nov 2024 10:00:34 +0000
ROA not after: Wed 26 Feb 2025 10:00:34 +0000
asID: 43260
IP address blocks: 104.245.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:33:21:14:53:34:4e:30:bd:a8:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
Validity
Not Before: Nov 28 10:00:34 2024 GMT
Not After : Feb 26 10:00:34 2025 GMT
Subject: CN=3aec15fb-e5fe-4315-b075-93aefe6e417c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:ce:1e:c1:49:3e:74:c4:4f:09:87:f4:fb:
f8:bf:0d:19:84:f8:85:e3:72:18:89:b2:b3:ba:09:
35:99:60:9c:6b:d6:56:bb:31:a5:f1:1a:d4:2a:39:
b0:74:fc:61:56:6e:76:71:99:aa:1e:12:8f:dd:5e:
58:4c:55:aa:22:fc:4f:9d:30:88:4c:0d:78:bb:94:
ea:ad:a0:c8:ec:cc:a3:a4:d5:d3:e9:31:be:ed:31:
33:8d:c5:17:c7:c5:14:fa:81:99:d8:39:97:4a:12:
07:9b:a7:d5:47:21:a2:48:cc:57:d7:35:dd:8d:1b:
a0:eb:75:a3:0b:87:ad:de:84:73:b7:cc:d0:12:31:
82:a7:dd:25:df:63:9d:49:ac:98:13:46:5a:3a:f0:
e3:4c:33:ce:7b:da:55:5f:5b:71:91:b7:47:ed:d2:
8f:b8:b5:17:39:0e:4a:22:32:6f:6b:fa:70:57:37:
27:89:c6:79:f0:62:01:a7:e7:79:52:08:7b:e7:6f:
52:45:59:73:1a:1f:4a:db:c3:a6:50:d3:b6:2a:1e:
98:de:11:b4:f4:1c:0b:f3:67:5b:23:b8:48:1c:cc:
ca:03:38:6a:85:f7:bd:35:ce:83:c8:c1:d7:b8:79:
c2:92:c0:05:aa:cd:48:89:3e:2b:f6:6b:7a:31:41:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:46:53:AE:86:0E:E7:2F:18:E9:DB:7A:B6:C6:D6:0B:C4:D9:6C:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/95fd9d1d-c2f7-39cc-bd16-6a8e5e073753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl
X509v3 Authority Key Identifier:
keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:82:e0:fa:46:a3:00:17:0d:86:87:ff:5e:27:d2:f6:32:e0:
4f:a5:2e:9d:89:0d:de:f2:8e:9e:92:74:f7:e9:0c:1e:23:67:
67:45:14:77:e6:3f:9b:7f:a2:71:05:37:f8:ae:37:56:22:ed:
aa:71:a1:af:c2:0a:fa:9a:fa:21:ab:af:30:a6:1b:67:78:a8:
f2:cc:48:aa:dd:57:86:8c:0f:eb:9e:a5:f8:fd:86:f0:12:94:
82:80:b2:c0:74:ad:d2:d6:ee:81:7d:9a:ed:73:93:8e:8b:a7:
71:a2:f1:8a:4c:d5:a8:81:2b:dd:77:13:31:5f:66:40:ed:65:
d8:0f:39:36:d7:c2:ab:a5:5c:27:dd:5f:5c:53:0e:a4:c7:16:
92:b5:a1:98:a5:4b:11:d0:11:9d:b5:2f:9a:94:6e:f5:3a:23:
52:1d:59:89:c3:3b:87:40:5c:c3:9c:a5:fe:f4:80:65:5b:ff:
5a:01:76:0d:f6:4f:20:1a:03:8e:4e:40:67:6d:b6:cb:de:b2:
4a:4a:0d:8e:48:31:81:1f:d0:bf:f7:db:e2:0b:c9:e9:c4:b8:
72:11:9d:3f:ee:10:43:fd:5d:21:6e:f5:dd:d9:35:e7:27:2e:
08:08:fe:cd:20:32:4c:76:1d:05:1d:ad:6e:4c:3f:59:ea:65:
02:22:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:34 2025 by rpki-client