Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7114e74-7312-39a3-a198-7b5aacb0158d.roa
File: d7114e74-7312-39a3-a198-7b5aacb0158d.roa (raw, json)
Hash identifier: HRrPTKGk2BiwTnUyZDjz5O2IwUqtxLxQL2yPpRrqgKk=
Subject key identifier: FC:D0:EE:C4:72:92:D6:4A:38:F6:4C:24:25:69:54:8B:67:17:42:EB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584769D0E6CBA74579292BDCC480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7114e74-7312-39a3-a198-7b5aacb0158d.roa
Signing time: Thu 03 Oct 2024 01:00:31 +0000
ROA not before: Thu 03 Oct 2024 01:00:31 +0000
ROA not after: Wed 01 Jan 2025 02:00:31 +0000
asID: 16625
IP address blocks: 104.83.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:69:d0:e6:cb:a7:45:79:29:2b:dc:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 3 01:00:31 2024 GMT
Not After : Jan 1 02:00:31 2025 GMT
Subject: CN=3851c96b-a351-4ce9-ad90-bf6eb58029bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:65:a2:d8:33:2f:e0:e4:67:21:79:5e:b0:
e8:cb:10:0f:14:1f:f1:8e:53:92:81:50:73:43:c1:
16:e2:54:91:ff:77:61:5c:0b:d7:ca:1f:99:8e:98:
a2:77:9c:a4:51:5b:1a:a3:6a:3d:0b:60:03:b6:85:
81:ea:58:ec:18:e0:e6:47:98:12:1b:c1:c9:0d:aa:
a0:85:fc:c0:f1:bb:07:42:79:5c:d6:49:42:2e:9f:
e8:e5:04:e8:f2:a6:09:8f:8f:7f:b0:53:cf:fe:96:
a4:b8:74:81:dd:15:9c:bd:25:b7:51:70:f9:87:70:
25:88:98:96:b7:08:7e:b5:cd:ff:eb:d8:81:d6:1b:
39:d9:bb:d4:2e:42:b0:1f:f5:51:01:dc:66:63:a6:
cd:2b:e3:bc:9e:14:54:c0:7c:9a:84:d6:8f:71:ef:
19:79:30:f6:3d:01:5b:38:0f:f5:52:0e:2f:4a:5f:
25:11:c3:1f:e7:79:a4:ac:1d:38:17:ac:b2:08:5c:
08:76:af:d4:c4:79:cf:05:b7:e1:27:d8:4e:b8:87:
78:b3:54:a8:49:59:96:78:c8:31:f7:5b:84:82:32:
a4:5c:a6:20:6c:7e:be:35:0c:b0:6a:71:e0:0f:8a:
9e:b1:70:ed:91:02:02:2f:4f:3e:45:a0:cb:d9:f9:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:EE:C4:72:92:D6:4A:38:F6:4C:24:25:69:54:8B:67:17:42:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7114e74-7312-39a3-a198-7b5aacb0158d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.83.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:ec:43:8d:82:84:59:a5:97:d1:ae:59:cd:97:bc:c2:d2:29:
85:b8:d8:ef:de:02:9c:e3:fa:55:12:21:96:e9:b1:9d:df:7a:
70:c4:fc:e3:b4:fd:4a:fb:8d:f2:94:5f:26:3c:5a:7c:a3:4e:
71:e9:4f:44:c1:79:14:20:85:74:6f:bf:3e:fe:d7:30:bc:de:
8c:03:14:61:78:1d:89:df:4e:60:46:2d:60:a6:cc:72:ac:0a:
e9:42:e7:db:db:15:d1:f6:ff:95:f7:00:38:97:68:48:72:20:
2f:12:ed:f6:a1:2a:95:75:55:d9:4b:76:bb:5a:47:4b:ca:43:
de:4e:b3:e1:54:45:4a:e4:80:64:b8:1d:18:2b:9d:3c:ec:19:
49:eb:18:90:c3:b0:6c:b5:a6:5c:b8:86:0c:b6:22:ad:b3:b1:
d1:35:75:34:f7:e9:a6:16:46:4f:8f:a9:71:c0:ea:d7:9d:80:
2f:12:28:73:35:72:1a:13:49:6b:b9:ef:4e:f8:3d:c0:a4:75:
63:37:be:25:54:11:f3:2e:e6:a5:58:ad:02:4d:d1:52:10:6b:
67:7c:d0:86:c4:32:e4:33:eb:d1:c4:48:bc:f5:75:60:34:e4:
9f:8a:e5:ec:db:6e:2f:da:b1:2f:a9:6b:78:7d:87:a0:b5:1b:
79:64:7a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:45:17 2025 by rpki-client