Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/928badcf-c620-3255-a02c-82d0cc189d2c.roa
File: 928badcf-c620-3255-a02c-82d0cc189d2c.roa (raw, json)
Hash identifier: vtwBMQU6LZl8LQaoFbV5V6QxJdhUPE3Wh3NEKi6QHyk=
Subject key identifier: 82:89:CB:59:40:05:41:BF:AB:79:92:EC:B0:07:5B:47:B7:B9:2A:27
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285845B7B371EF4AA08189F41A2940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/928badcf-c620-3255-a02c-82d0cc189d2c.roa
Signing time: Tue 30 Apr 2024 13:00:34 +0000
ROA not before: Tue 30 Apr 2024 13:00:34 +0000
ROA not after: Mon 29 Jul 2024 13:00:34 +0000
asID: 16625
IP address blocks: 104.106.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b7:b3:71:ef:4a:a0:81:89:f4:1a:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 30 13:00:34 2024 GMT
Not After : Jul 29 13:00:34 2024 GMT
Subject: CN=34c465b3-10c7-4ab7-8584-f3b76ea6eabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:1e:51:7c:24:b4:7c:46:1c:7c:cd:c5:94:
57:66:bf:52:be:62:31:30:87:75:9d:6d:a8:13:37:
17:69:21:b0:0d:b8:86:56:2f:fb:ed:3a:ae:f4:db:
20:ea:15:7d:9c:62:c5:48:7d:43:54:6c:48:4a:40:
f5:3e:43:ec:62:8c:3a:6b:9a:8c:77:8f:f6:ce:2f:
34:a4:d5:6d:7f:4a:78:9b:ae:d7:0b:03:28:6c:5e:
16:9b:50:ef:e9:86:86:4f:c7:ce:f1:7e:0a:83:3b:
ee:6d:6c:84:e4:65:3e:ca:61:35:46:85:76:b5:50:
ad:09:a7:4a:58:08:bb:40:23:c5:96:24:b4:85:93:
08:3f:f2:90:69:5a:0e:9c:5d:da:f2:e8:27:3b:b2:
da:4b:89:63:d4:7f:36:43:69:fc:fb:b7:b5:d7:87:
05:51:2b:f2:7c:2f:cb:f2:cf:48:4b:db:84:0c:ca:
40:04:b0:84:53:cd:6c:29:a5:f6:6c:50:14:b4:6d:
12:59:4b:1c:3a:22:9e:bc:c7:67:de:94:34:ef:13:
c5:b7:e3:73:29:69:9b:62:35:29:d3:2f:26:2f:c1:
56:59:f5:5f:a3:15:43:67:6c:12:8a:fa:e4:34:b4:
3a:bb:83:8f:fb:b6:53:c6:df:a4:8f:a8:15:9e:73:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:89:CB:59:40:05:41:BF:AB:79:92:EC:B0:07:5B:47:B7:B9:2A:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/928badcf-c620-3255-a02c-82d0cc189d2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.106.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:67:69:91:a2:44:21:01:be:b6:6b:ec:05:7d:96:c6:6a:3d:
f6:68:fb:64:bb:65:cc:6e:3d:9d:31:ea:37:1a:98:a4:1b:22:
c8:b1:ea:b2:e4:a3:51:7e:81:70:f4:f7:28:a4:7c:58:fd:9a:
35:9c:d1:dd:18:58:f0:ed:34:2e:a2:fa:7d:46:4b:63:fe:b0:
45:7d:04:a2:76:33:31:fd:42:64:22:61:f1:cb:3d:77:28:07:
66:9a:48:ba:ec:0e:d9:28:67:28:6e:d4:fc:c9:ea:c9:66:30:
be:16:8a:2e:fc:92:32:76:2d:ec:8e:92:cf:24:27:4f:88:1f:
cc:5f:50:2d:41:8b:7f:75:8c:cc:63:40:2e:e1:0b:d2:13:ef:
24:f0:29:c8:68:3f:c1:e4:87:4a:e3:30:84:6a:05:ef:f6:b5:
33:68:5d:a8:cb:45:6e:6b:a6:35:25:7d:6c:38:62:be:88:11:
26:a6:09:8f:c5:61:d7:97:f1:84:15:c2:db:80:a0:4b:0f:56:
91:0e:54:08:38:db:59:ac:4d:7e:8b:1d:e1:2a:51:a6:04:f5:
6f:ff:bc:d5:0b:61:1a:ed:8b:89:3d:6a:44:fe:fc:7d:b1:bc:
fa:6d:21:0c:ab:c3:f1:c1:1d:51:8e:b3:c3:3d:1d:e0:4d:7c:
4c:9f:17:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:37:37 2025 by rpki-client