Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ff3864-d4d5-37f1-ac1e-179334deab40.roa
File: 33ff3864-d4d5-37f1-ac1e-179334deab40.roa (raw, json)
Hash identifier: 8kaI/7buBoz1rwIzbVFo4T45ivXw8lar5b///tRrGLY=
Subject key identifier: 80:8F:E1:8E:8B:37:71:7C:DC:F8:94:3A:05:63:D9:BC:53:3D:2F:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846970A42AE8595823B87D01180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ff3864-d4d5-37f1-ac1e-179334deab40.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 16625
IP address blocks: 104.96.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:42:ae:85:95:82:3b:87:d0:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=78a61099-62a5-4ccb-96bf-099f2d6b3369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:3c:50:bd:2b:0f:f0:0d:9b:34:6f:ba:b5:
45:96:f6:1a:58:ff:37:e8:0a:0e:75:2d:20:bb:a2:
8c:b3:9d:d2:8b:a1:de:70:16:42:d0:1e:ce:0a:9d:
81:3c:e1:e3:da:6f:a5:2c:6f:ec:f6:62:46:af:ab:
2d:85:04:45:c3:da:47:7c:36:81:75:fc:d5:86:da:
5f:c2:28:6c:d0:47:67:86:47:d0:e7:a1:1a:7f:5b:
e0:b8:6f:49:92:a0:79:bf:62:5b:54:ec:17:1a:9b:
f5:16:de:0d:40:60:6e:48:8f:b2:8d:9e:05:e5:6a:
a9:fa:74:1b:ac:cb:47:97:11:8e:91:bc:b2:f3:dc:
0c:97:04:d4:20:f7:fb:31:06:7a:9a:0c:08:32:37:
d6:98:17:d9:11:59:9e:92:49:c2:ba:6c:d5:1d:c9:
17:e9:10:3a:c4:15:d3:f9:3f:29:8f:44:c8:23:a9:
dd:94:5c:b4:84:e7:fd:67:5b:e1:2b:e0:e8:c9:f7:
40:0a:f1:67:3b:82:bc:f8:70:cb:80:e8:f1:f9:8b:
87:0e:52:38:1f:3e:d2:e9:26:17:8d:4d:38:e2:49:
dd:4d:ae:01:f4:83:d8:7b:1b:30:26:45:35:5e:f4:
ba:dd:14:01:ee:83:29:23:98:8e:d3:85:99:99:e7:
98:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:E1:8E:8B:37:71:7C:DC:F8:94:3A:05:63:D9:BC:53:3D:2F:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ff3864-d4d5-37f1-ac1e-179334deab40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.96.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ef:66:fe:71:e3:f8:1f:84:6b:fd:47:79:ea:80:74:e9:7b:
79:50:13:88:c8:e9:c9:20:73:24:ad:45:ae:c6:44:7f:12:da:
4c:eb:82:d2:2a:40:83:c5:f6:47:fa:39:d1:18:a7:bd:7f:9b:
89:8c:1a:69:81:18:d1:c5:56:02:74:14:e0:97:dd:2b:d2:e4:
ab:93:ce:5d:38:b1:b3:99:10:0e:0d:49:42:42:f9:3c:f4:10:
c9:22:85:fd:e2:25:ff:e2:65:fa:27:49:22:74:ce:87:3e:7f:
c6:1e:ee:b2:8e:5b:0d:08:f0:6d:ee:ba:2d:11:28:8f:7e:24:
e2:92:4c:7e:dc:f1:88:40:5b:9e:d1:c0:32:97:13:a3:87:68:
79:14:58:95:02:4c:d6:88:f5:1a:f1:72:a9:01:e8:dc:24:af:
23:01:b3:ee:b2:38:97:50:4f:1a:2b:2b:35:03:01:a4:42:51:
84:60:2e:88:68:93:be:88:6e:59:35:73:8f:38:17:62:97:6b:
9a:f9:de:ca:8c:35:54:4b:96:e4:fc:27:74:29:f4:bc:ad:26:
cc:1e:f6:7b:a0:28:09:a9:a6:cc:a6:d7:ef:15:db:b2:e2:b4:
af:31:cc:df:0a:46:33:bb:10:e7:2e:ce:8d:0a:77:ac:51:5c:
e3:ec:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:48:04 2025 by rpki-client