Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/dfbc4965-f6ba-359e-92b0-6dd0bba422c6.roa
File: dfbc4965-f6ba-359e-92b0-6dd0bba422c6.roa (raw, json)
Hash identifier: U31UyX4If+NqTZ249Q0QEij48RB7KGE/i/OS14KwHE8=
Subject key identifier: FB:EF:26:7E:06:A2:20:61:6E:6F:19:93:A4:E2:1D:D9:1C:33:34:A9
Certificate issuer: /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial: 010D0C9F4328584807327D84691051FCA329F840
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/dfbc4965-f6ba-359e-92b0-6dd0bba422c6.roa
Signing time: Thu 28 Nov 2024 09:59:17 +0000
ROA not before: Thu 28 Nov 2024 09:59:17 +0000
ROA not after: Wed 26 Feb 2025 09:59:17 +0000
asID: 43260
IP address blocks: 104.245.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:32:7d:84:69:10:51:fc:a3:29:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
Validity
Not Before: Nov 28 09:59:17 2024 GMT
Not After : Feb 26 09:59:17 2025 GMT
Subject: CN=1e3cea4f-4eec-41d5-a7d4-e8324c5a818c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:d9:e8:dc:07:4f:ce:1c:48:39:57:f7:af:
5c:fe:69:5d:cb:a0:3d:16:b9:38:5f:f3:cb:18:d6:
c3:e6:b4:c6:d2:df:ce:76:80:31:98:f3:61:d8:b5:
a6:cb:ad:f3:67:00:b4:ee:8e:fc:10:9f:ca:4c:fe:
34:92:8a:9f:12:3b:4b:d1:00:9a:8e:de:7f:a5:97:
d7:1f:d4:fe:91:30:d8:d5:5b:a2:38:f9:da:4e:67:
8a:d8:cd:63:11:24:61:2c:bd:85:7a:78:cc:1c:0c:
8e:75:a3:04:f8:c6:d0:61:d8:87:52:52:63:2e:09:
6d:8c:44:dc:67:8b:99:82:1f:fe:35:64:c4:4a:13:
1a:23:ff:3a:ad:2f:4a:a8:62:65:f5:72:d2:b1:42:
61:85:f1:a8:40:19:8a:e2:d1:72:ef:dc:f2:07:fc:
5b:b7:83:78:0d:bf:64:a5:c5:04:70:90:5d:e5:93:
47:3f:eb:a0:9d:57:11:0d:c0:07:9e:26:e2:d0:4b:
5e:fa:87:0f:70:08:64:28:e4:7c:dc:86:0a:3f:5f:
59:84:cb:dc:3a:10:fe:1c:34:54:43:92:f7:a3:90:
ec:ca:02:41:1b:f4:2a:23:b7:d6:7c:a1:7c:2f:df:
dd:f2:18:9c:13:df:32:e6:14:33:cf:42:ef:17:e8:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:26:7E:06:A2:20:61:6E:6F:19:93:A4:E2:1D:D9:1C:33:34:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/dfbc4965-f6ba-359e-92b0-6dd0bba422c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl
X509v3 Authority Key Identifier:
keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b0:07:0e:50:f4:d7:e1:a6:9b:b6:55:d3:71:17:b6:db:a5:
f0:96:fb:ef:ac:b3:80:f5:6d:5c:cd:02:d6:0d:02:bf:89:6c:
fe:c8:d6:09:75:d7:fb:f3:fa:b7:98:43:ed:2f:d7:b3:7f:f5:
4d:33:cb:29:9b:c0:89:1d:0a:10:58:bf:5a:26:e7:4f:7d:ed:
ca:0b:85:b6:17:6d:3c:de:88:eb:50:db:69:04:41:ff:0e:5c:
8c:51:43:3a:14:67:57:b4:6d:db:b7:10:7e:fe:45:f2:48:69:
ff:9f:09:e8:04:3a:59:08:4f:d6:4c:09:f1:4c:9e:78:8e:97:
70:da:1e:02:cf:73:f4:59:7d:2f:8b:b8:8a:1d:ec:46:e7:35:
80:b6:56:c3:d0:11:c9:37:f4:16:f0:61:98:11:1e:d8:4b:1d:
7f:b7:c9:6b:16:37:c5:c8:b5:4c:12:38:ee:2e:9d:f3:c1:63:
0f:64:b6:f7:c3:8c:f2:5c:18:f6:83:fd:fb:63:4c:cf:d4:aa:
53:04:44:f7:ae:10:6d:c5:12:44:f5:e5:a5:59:4e:c5:2c:a3:
cc:e7:98:77:0b:54:1e:32:48:c5:61:36:7d:80:76:dd:ef:df:
47:32:90:09:00:ad:b5:fc:81:e8:95:ea:9b:d1:be:e1:65:53:
ca:47:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:47 2025 by rpki-client