Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb8b59b6-9baa-3e31-ad30-26e406be3b0e.roa
File: bb8b59b6-9baa-3e31-ad30-26e406be3b0e.roa (raw, json)
Hash identifier: 7dLWouuPxtW3PzC/4Rp+AvyRWREEOFOYwb0mcSKvZCM=
Subject key identifier: BA:D4:60:17:E6:74:97:90:78:71:DE:68:B2:3A:21:AB:37:C6:7B:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858468914C4E2166277B4E89A6060
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb8b59b6-9baa-3e31-ad30-26e406be3b0e.roa
Signing time: Sun 14 Jul 2024 13:00:33 +0000
ROA not before: Sun 14 Jul 2024 13:00:33 +0000
ROA not after: Sat 12 Oct 2024 13:00:33 +0000
asID: 20940
IP address blocks: 104.123.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:89:14:c4:e2:16:62:77:b4:e8:9a:60:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 14 13:00:33 2024 GMT
Not After : Oct 12 13:00:33 2024 GMT
Subject: CN=5ed0b204-09b8-48ba-8047-29c6f8ff2389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9b:11:79:84:c2:c8:46:28:9a:4e:d5:f5:fd:
20:4f:14:0c:c4:bd:11:61:86:3a:6e:f5:02:96:7d:
45:fa:2c:9a:bb:6d:f5:7e:23:aa:be:36:25:43:4e:
b0:35:00:86:4d:65:5c:6b:51:45:62:ce:21:57:67:
b3:e6:12:c7:80:38:87:7b:d2:68:f9:31:2c:a1:86:
8f:07:64:48:7b:dc:9b:78:37:90:93:ba:6f:01:74:
8d:e3:57:8d:9e:dd:b0:c1:70:51:97:70:14:51:34:
b2:25:ff:2b:d9:70:1a:6c:91:01:8e:02:fd:e6:8c:
71:6d:53:df:63:3b:1a:8a:63:ac:4a:74:26:5d:ab:
e6:27:84:39:a3:6c:74:81:d8:7a:f4:7e:45:a3:10:
8e:49:cb:35:80:a9:0f:c0:dc:f6:e0:ca:a6:fd:98:
6a:4c:da:87:05:16:2d:d1:2c:4f:da:26:9f:5c:0a:
2b:4b:0e:ee:92:14:5b:ab:ae:64:f7:16:12:12:ca:
bc:e3:2b:b5:5d:44:ef:c2:09:79:45:ce:8a:12:20:
ba:97:54:fa:98:f4:a4:9f:9d:d6:c8:d7:54:1f:2b:
e5:db:9a:36:9d:91:a6:cf:80:32:5a:3a:b1:94:62:
b9:b3:d8:10:3a:b1:70:3e:bc:04:2e:2a:47:d2:85:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:60:17:E6:74:97:90:78:71:DE:68:B2:3A:21:AB:37:C6:7B:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb8b59b6-9baa-3e31-ad30-26e406be3b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:20:da:41:a1:46:bd:1b:c5:cb:9f:c5:9b:f7:da:af:d9:d3:
a3:66:7b:ab:f8:93:88:cc:57:5b:a8:ba:d8:c3:0a:ac:d0:99:
de:af:c0:20:5f:dd:0d:6f:35:2f:91:75:e2:1c:79:61:6d:02:
b0:ac:57:f8:88:bb:36:90:46:15:fe:96:76:10:c5:15:a0:11:
d1:1e:57:f2:4b:aa:55:4b:3c:97:db:b3:e1:e7:7d:f9:20:50:
d8:35:57:64:4b:5f:ae:20:c0:ed:a3:5d:11:9f:b3:b2:3c:01:
e8:0a:2f:3a:ee:51:24:61:c6:a8:ba:e5:38:3f:e7:54:cb:0b:
de:14:16:a8:4f:e7:1f:81:3f:77:9b:9d:85:68:ef:22:da:ab:
47:7b:c9:06:b2:7a:ae:72:6e:08:73:d4:29:55:a6:4d:23:90:
a8:7f:89:d5:a0:21:90:b9:fc:26:e0:30:45:cd:32:07:7a:2e:
a6:78:92:87:0b:16:df:85:e0:5b:2b:a5:af:c7:68:5e:c0:55:
62:c9:0c:1c:62:41:40:be:fc:5c:dc:1a:d0:9c:7a:37:ba:05:
38:b4:ee:02:3c:63:f0:6d:18:e7:cc:04:48:0d:4c:c7:8b:10:
d5:c8:5a:35:96:a2:bd:25:12:cf:cb:c0:0f:ee:3d:54:01:93:
32:5b:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:53:11 2025 by rpki-client