Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f840aeac-5f5a-3587-9871-e333479f33f1.roa
File: f840aeac-5f5a-3587-9871-e333479f33f1.roa (raw, json)
Hash identifier: 7oylrULw+FIcpPYCeWskMEJbf/PI7ztG3eYk5dc+luI=
Subject key identifier: E9:FA:0B:DA:B1:D2:3B:52:4D:52:6E:4C:BA:D2:B9:60:C6:3C:0A:E4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A068CCB72845F9BE995B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f840aeac-5f5a-3587-9871-e333479f33f1.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 8781
IP address blocks: 104.122.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:68:cc:b7:28:45:f9:be:99:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=cdd2295f-c678-4493-9c97-8169ab455066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:88:6d:bf:8c:de:e6:a0:59:b2:89:ec:78:
f2:27:8f:23:b5:83:e1:10:af:b6:e6:98:27:ad:1e:
3e:84:b3:fa:64:f9:c0:44:c4:3a:70:12:80:ce:e2:
b6:0c:1d:66:c2:6f:3e:25:f1:be:5c:28:1e:d7:d5:
cd:77:41:c1:e4:de:74:2c:02:f7:cb:44:aa:16:0e:
79:9a:4d:e2:f4:fe:c6:9a:68:08:03:c8:21:ed:a6:
0c:0c:93:05:be:14:71:5f:f1:6b:99:63:cd:59:fa:
14:5b:97:cf:5d:74:67:76:cc:3d:7e:b7:f1:9e:3c:
94:a9:b6:74:08:82:58:c8:59:01:22:b0:f9:b6:09:
f1:08:05:98:09:d5:c2:60:ba:bb:c3:ce:1a:e4:10:
58:db:3c:61:c1:e0:32:d6:55:7e:58:f6:32:26:86:
6d:9a:e1:ad:9e:a4:03:ee:9e:c4:d8:e8:50:27:3e:
43:81:e0:11:02:0e:38:db:99:5d:37:5d:15:e7:be:
3e:b9:eb:7c:a0:80:98:e9:92:c3:4b:db:31:9b:8b:
2c:c1:f1:a2:24:bc:5c:5c:03:6e:d2:91:06:35:58:
6a:8c:ce:16:6f:e7:f6:98:62:a5:73:73:ba:e5:20:
1d:71:14:13:00:68:7d:d9:f6:3e:de:52:52:1b:e4:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:0B:DA:B1:D2:3B:52:4D:52:6E:4C:BA:D2:B9:60:C6:3C:0A:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f840aeac-5f5a-3587-9871-e333479f33f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.122.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:95:83:c1:f1:f5:65:64:32:dc:e4:15:5b:73:99:43:01:08:
c5:46:71:f1:d4:a7:9f:df:36:30:b9:7d:a1:7b:de:c4:e0:8d:
56:16:56:a3:c5:9d:22:23:5c:f6:17:ad:62:6d:5f:59:04:da:
07:03:c3:25:71:1c:09:a7:70:8d:df:aa:c0:7d:3b:8b:9e:1b:
08:3e:4a:56:2a:90:1a:ac:96:09:26:ee:97:56:d4:69:5b:7c:
2d:a0:8a:e2:a9:0b:1f:bf:16:e5:50:2c:51:b5:2a:ac:d3:84:
7b:c7:e7:24:1e:c4:84:ef:e5:0c:87:4d:1c:ea:b9:d1:cf:81:
2e:4b:81:44:04:73:96:cf:9a:2c:00:5c:2b:07:ba:ab:0f:1b:
b1:bb:a1:e3:7f:1f:f9:c7:22:16:9c:49:4c:dd:5c:5d:31:a0:
83:25:cf:a1:bb:39:02:e4:b9:3c:3c:13:2d:69:56:60:5a:76:
f7:d1:21:6f:9d:76:32:59:6c:c1:eb:be:09:36:b5:fa:11:aa:
38:3b:ae:eb:6c:b0:4f:60:94:ea:22:65:50:e5:64:63:58:31:
8c:72:31:41:29:00:fd:8e:24:98:05:8c:cd:ec:67:2c:22:9a:
6c:0b:b6:31:e2:9a:b3:cb:b0:13:46:f6:86:de:d7:4b:8e:95:
b5:47:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:18:49 2025 by rpki-client