Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61996a9d-6451-360d-ab7d-61dc66acee83.roa
File: 61996a9d-6451-360d-ab7d-61dc66acee83.roa (raw, json)
Hash identifier: pih1FYmp67XwDj/FIP7TfrPJoDK6aZQWWA5fDhFRYno=
Subject key identifier: 1F:2E:3D:10:D2:26:0B:3A:2C:72:3C:62:49:99:76:0F:25:64:6A:6A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584699D4EE8CC851CBEEA015FF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61996a9d-6451-360d-ab7d-61dc66acee83.roa
Signing time: Sat 20 Jul 2024 13:00:35 +0000
ROA not before: Sat 20 Jul 2024 13:00:35 +0000
ROA not after: Fri 18 Oct 2024 13:00:35 +0000
asID: 16625
IP address blocks: 104.123.210.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:99:d4:ee:8c:c8:51:cb:ee:a0:15:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 20 13:00:35 2024 GMT
Not After : Oct 18 13:00:35 2024 GMT
Subject: CN=f8f784b8-b970-4fce-a61a-55e90601954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:d0:8e:98:11:a5:30:08:19:bb:40:3f:e4:
35:00:65:fb:59:2e:1f:a1:da:fe:45:a5:76:22:46:
a8:b4:18:fb:ff:ce:2a:7b:c3:86:fb:cb:14:58:1b:
37:1e:f0:5c:92:9a:ea:da:3f:fd:e4:1c:12:69:e0:
11:06:50:3d:72:35:2f:0b:f6:ae:01:18:a9:d9:87:
bd:09:ef:e9:d4:0d:14:19:be:11:e3:f7:72:15:85:
03:81:66:69:be:27:26:7c:b7:5d:06:2f:87:90:1e:
9c:ee:2c:5b:b0:f1:f5:32:bd:8d:a5:ff:ab:68:72:
ff:21:dd:c0:c8:f8:22:8a:13:bd:1e:94:c8:45:97:
bd:76:e8:3f:7e:0c:91:e2:8c:a9:d4:88:e5:08:d7:
8b:44:46:9d:b0:c7:71:78:75:ca:69:35:58:32:ea:
90:87:85:77:57:31:ca:ae:71:2a:c4:9b:a4:aa:c0:
c7:a2:11:6d:30:36:a4:da:d7:8c:b0:50:ad:b0:c6:
c1:69:cc:18:be:8d:9d:71:93:c5:0c:92:12:7c:30:
9d:ae:72:e9:8b:98:42:2e:1f:6f:55:9e:3a:bf:cf:
8c:f4:64:46:9e:25:69:ed:c6:81:1a:e6:28:f2:37:
d9:7e:47:40:5a:1b:8a:30:50:14:68:a5:11:a5:8a:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:3D:10:D2:26:0B:3A:2C:72:3C:62:49:99:76:0F:25:64:6A:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61996a9d-6451-360d-ab7d-61dc66acee83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:fe:36:d0:e6:3e:35:e4:15:1a:d9:98:c4:20:ba:d8:83:3c:
86:5a:45:f0:4f:a6:a3:ba:cf:cc:cb:45:d4:df:9c:f9:4a:ff:
65:a9:97:f1:98:01:70:e9:f9:09:b1:15:c9:69:9c:a4:52:ef:
9b:4b:af:16:98:03:71:84:60:0f:39:d1:03:54:b4:3f:fd:83:
89:5b:ac:de:b3:1b:56:23:89:66:fe:34:03:0f:0c:16:4d:f6:
8d:23:32:e2:5b:cd:e3:29:43:ec:84:73:35:b0:22:c9:24:b8:
8e:b8:a4:6f:16:8f:c3:f6:b4:e3:89:b0:32:99:44:e0:60:95:
9b:2c:63:83:f6:1b:a9:de:3b:27:e9:41:96:42:5a:14:51:08:
4b:26:9e:c2:16:53:e1:5c:f8:44:88:43:6f:09:ee:4a:f8:4e:
92:de:64:1a:80:da:e0:69:1e:8f:ca:5d:d0:5e:a9:78:e9:a6:
bf:38:0f:2b:48:6b:98:6e:fb:b9:30:a1:24:b5:e4:e6:d6:fd:
6d:9e:56:6f:0f:56:30:74:1b:29:d3:dc:0c:1e:96:35:b7:78:
20:fb:b6:c7:41:75:b3:13:2d:da:86:9b:58:0f:53:a1:10:9b:
06:3b:a7:f9:0f:d6:7e:0c:7a:c1:2f:b7:db:15:a7:a4:6b:44:
35:f6:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:06:51 2025 by rpki-client