Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/cb4a4421-4aa2-3868-a67c-b8256710ae4e.roa
File: cb4a4421-4aa2-3868-a67c-b8256710ae4e.roa (raw, json)
Hash identifier: RsvC4NpEFsUAVgVL1b0SZsVn1jj1g3oGp53tMY0mxvA=
Subject key identifier: 54:F6:E6:E8:A9:7A:F1:02:81:C7:10:84:4F:83:CB:C0:6F:63:0E:81
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F432858440D918B6A7EF0149F3C175440
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/cb4a4421-4aa2-3868-a67c-b8256710ae4e.roa
Signing time: Wed 29 Nov 2023 21:37:54 +0000
ROA not before: Wed 29 Nov 2023 21:37:54 +0000
ROA not after: Tue 27 Feb 2024 21:37:54 +0000
asID: 8100
IP address blocks: 104.156.129.0/24 maxlen: 24
104.156.130.0/24 maxlen: 24
104.156.131.0/24 maxlen: 24
2607:76c0:b::/48 maxlen: 48
2607:76c0:c::/48 maxlen: 48
2607:76c0:d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:0d:91:8b:6a:7e:f0:14:9f:3c:17:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Nov 29 21:37:54 2023 GMT
Not After : Feb 27 21:37:54 2024 GMT
Subject: CN=c20c81c7-e082-4046-9df9-be43a9f50742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:64:d2:40:41:58:5a:9e:21:db:b2:3b:95:
a0:14:87:03:a9:49:af:44:d9:0f:78:1e:e0:e6:4a:
fd:62:91:f0:8c:20:5c:c8:ed:b6:8f:e5:cc:45:ae:
24:26:92:bd:5f:d6:ee:fa:bb:72:33:9e:f6:47:16:
96:ad:7a:ae:9e:a7:49:64:ed:be:eb:9f:07:1f:8d:
08:40:86:62:e6:41:2c:01:d6:80:68:20:f7:51:26:
bf:66:5b:bd:db:f7:27:7e:85:2d:18:92:5f:7a:4d:
3a:60:44:6d:cf:10:61:ba:8e:0e:95:e3:3d:06:ce:
df:49:81:73:c6:a6:a9:d8:dd:c6:28:0c:06:1e:e8:
45:25:08:e1:80:e3:72:71:fe:c5:06:5f:a5:8d:fb:
b5:04:c0:ac:8f:6e:ec:c1:bf:e0:a0:f6:d9:3c:f8:
94:50:3a:a9:9d:fc:dd:ed:8a:75:f7:e5:02:e4:06:
a8:70:21:9b:ec:8d:04:5a:90:8a:f5:08:a0:55:31:
03:90:34:be:83:76:64:7d:1b:fb:b6:d4:7a:d9:5e:
68:ba:b4:f9:ae:9c:e3:d6:17:a6:a7:97:40:30:2c:
cf:40:b4:13:b6:c0:b2:8f:7a:65:0f:ff:29:d9:53:
8e:4e:3d:40:48:7a:23:79:08:9c:fe:6a:52:3c:09:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:E6:E8:A9:7A:F1:02:81:C7:10:84:4F:83:CB:C0:6F:63:0E:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/cb4a4421-4aa2-3868-a67c-b8256710ae4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.129.0-104.156.131.255
IPv6:
2607:76c0:b::-2607:76c0:d:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:3e:f8:00:17:07:2d:b0:7b:71:6c:6a:e5:4c:f1:62:f5:11:
8e:61:df:89:42:11:37:20:24:53:38:07:3e:f1:9d:31:ea:76:
94:91:3c:60:96:6a:a4:40:ec:34:59:db:8b:82:76:bd:3b:63:
73:a1:6f:9a:40:a1:46:2e:88:5d:b7:c5:bc:f1:50:1f:26:87:
5a:64:70:9f:3d:2f:a9:2c:18:e2:e4:ea:d9:3b:d2:2d:7a:ae:
cd:00:ab:10:cb:75:f1:58:25:c8:f8:f8:8e:cb:d4:61:d8:6f:
56:9c:96:36:16:13:d3:ab:52:ef:a8:45:2d:04:b3:d9:f6:c8:
6c:f2:17:70:cf:c8:b7:a6:b3:68:5f:7a:80:ec:e3:fa:e6:3a:
8c:20:34:d3:a9:45:49:ff:7f:d2:1b:33:02:12:7f:28:a1:5d:
09:72:d9:04:da:af:5b:f0:1d:0d:6b:5a:81:8e:52:cc:bc:87:
d0:32:8f:0d:90:32:e3:20:f0:7e:a8:05:4f:c4:a3:2f:b0:8f:
06:2e:82:65:8a:5e:f9:76:69:b8:0f:04:2c:8d:2c:e5:d7:25:
85:c3:91:4b:fa:86:f9:95:78:ee:a5:cd:4c:73:46:18:3f:9c:
cc:20:3b:8a:8e:09:1c:aa:af:e6:9d:af:de:57:65:33:2e:83:
c1:35:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org