Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f89081f8-5b64-3539-abba-f77a3d999eef.roa
File: f89081f8-5b64-3539-abba-f77a3d999eef.roa (raw, json)
Hash identifier: UHC2D+qy95NH1rstUr2F0W8T20wz47wdqf+JxDfZZWc=
Subject key identifier: 24:94:DC:E1:EA:A3:7F:1A:BC:2E:1A:4F:D3:CF:A9:8B:BA:DB:31:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846986F7792AE9FD8D1CAA9A470
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f89081f8-5b64-3539-abba-f77a3d999eef.roa
Signing time: Sat 20 Jul 2024 01:00:26 +0000
ROA not before: Sat 20 Jul 2024 01:00:26 +0000
ROA not after: Fri 18 Oct 2024 01:00:26 +0000
asID: 9498
IP address blocks: 104.108.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:98:6f:77:92:ae:9f:d8:d1:ca:a9:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 20 01:00:26 2024 GMT
Not After : Oct 18 01:00:26 2024 GMT
Subject: CN=38b7e5d0-4105-41d7-912f-42c483e862d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:54:8a:1a:c8:38:63:82:35:b5:b0:8d:c2:
b5:6c:aa:28:9f:20:1d:c9:cc:e0:37:23:0b:1a:59:
e7:a9:ba:e7:56:13:02:df:d2:87:5f:a2:eb:c0:12:
95:7b:e2:d0:bb:ad:ae:56:2b:77:98:bf:36:77:31:
e0:dd:bc:57:88:e0:22:ce:5b:24:a9:3d:c0:4b:14:
71:94:cf:aa:e8:53:d1:ef:04:57:59:3c:2b:b3:fc:
78:e3:d5:99:68:51:24:35:b1:33:22:00:af:b3:38:
b7:cc:39:4a:16:35:1e:92:44:29:1e:f9:5d:81:0a:
8c:2b:c2:04:32:c2:9c:1d:75:ad:e6:c0:ef:33:2a:
15:35:68:56:00:08:af:ca:a6:91:97:58:ca:74:bb:
48:d5:cc:b8:a6:e0:d4:e5:2a:96:39:f9:15:0e:e4:
ee:1e:3f:74:a2:47:27:16:93:d8:c8:ec:ae:3f:61:
0e:26:38:73:54:49:82:ba:7b:1b:15:88:fd:fb:29:
be:08:11:18:d6:b7:74:d6:0e:06:27:58:14:cc:3e:
2d:7d:56:d9:50:dc:8b:28:07:68:22:22:fd:4c:ba:
56:ff:0d:77:eb:28:aa:f4:c2:58:ee:6f:4f:8b:1d:
c6:37:0a:19:91:f8:a9:f2:8e:16:cb:73:eb:81:89:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:94:DC:E1:EA:A3:7F:1A:BC:2E:1A:4F:D3:CF:A9:8B:BA:DB:31:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f89081f8-5b64-3539-abba-f77a3d999eef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.108.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:15:34:35:d5:88:63:7a:ef:bc:06:4e:67:d1:0c:d1:67:10:
9f:d3:8e:12:2a:8a:19:71:c2:0f:08:81:25:f3:64:5e:f0:9d:
ad:17:f3:95:3d:a8:73:74:fc:34:8b:3f:f2:19:5f:30:3f:c0:
63:81:d7:66:00:a1:c4:13:d8:fc:9c:0f:8f:28:ca:a6:d2:ff:
b5:92:c5:66:ee:d5:5b:b4:f0:e7:d3:1d:de:57:6c:ef:77:2c:
dd:48:56:3c:7f:2c:6e:71:28:d5:b8:4d:54:13:55:6b:1b:b6:
67:50:55:5b:94:25:e6:39:04:a5:da:b7:9b:e6:56:db:f7:b7:
80:b8:f9:cc:25:4a:d3:1c:4b:36:0e:d6:d5:83:cb:58:91:10:
3a:14:98:79:82:52:11:e8:79:e9:7c:72:b5:9b:ba:36:ab:3d:
07:77:b6:ad:f6:35:34:da:ee:16:50:43:dc:9c:bf:01:e1:2c:
b4:7a:78:b4:2d:d3:11:39:8e:05:fa:9d:bf:c4:0d:bc:c7:e0:
2b:c8:c5:53:1d:37:31:4c:58:20:88:6d:4b:4c:80:5f:54:ab:
7b:bd:11:3e:e4:25:ec:8e:4b:a9:6e:c8:36:32:1c:3d:89:84:
f9:c1:6f:31:47:61:b4:72:a6:43:03:09:f0:f1:3d:8e:83:4c:
5d:6d:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:54 2025 by rpki-client