Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe2cb0f5-cd23-3baf-9209-a35451e05a7a.roa
File: fe2cb0f5-cd23-3baf-9209-a35451e05a7a.roa (raw, json)
Hash identifier: xYRpaALZpp+1CvXl2Qtja4y97swot0ZNrBmO+aoAIKI=
Subject key identifier: D5:DB:90:1F:D9:42:23:6C:39:7E:86:54:73:54:D4:AE:67:98:2B:D5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584769D0E6A7E0156B5589E68D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe2cb0f5-cd23-3baf-9209-a35451e05a7a.roa
Signing time: Thu 03 Oct 2024 01:00:31 +0000
ROA not before: Thu 03 Oct 2024 01:00:31 +0000
ROA not after: Wed 01 Jan 2025 02:00:31 +0000
asID: 16625
IP address blocks: 104.83.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:69:d0:e6:a7:e0:15:6b:55:89:e6:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 3 01:00:31 2024 GMT
Not After : Jan 1 02:00:31 2025 GMT
Subject: CN=08f01fee-7780-4ca4-9c6d-fc5ae1150fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:08:a9:d2:ec:f5:10:0f:de:11:7e:e5:8c:
19:03:ba:ff:a8:f3:ec:92:12:e6:95:01:db:d3:06:
59:55:65:b1:a7:15:b7:c1:75:f7:27:c2:b3:ef:07:
f8:8e:77:61:86:f6:21:68:41:19:71:af:89:31:18:
f2:33:af:21:cf:95:0e:76:57:6f:e8:d3:7b:9d:a8:
35:cb:6c:b3:09:9b:18:75:14:e3:4f:f5:d2:48:49:
4b:3d:be:d2:1d:4f:d7:05:3e:e8:7b:08:e0:91:10:
cd:5b:26:ec:a8:6b:00:82:db:10:af:f4:9a:8e:fd:
47:d3:3e:e3:6b:30:e3:9b:19:78:17:91:f9:16:d5:
e4:ad:43:55:1e:5b:10:3b:6d:a7:91:3b:c7:ce:41:
cc:28:de:23:4d:8f:ba:a9:68:b7:a8:83:75:6b:a3:
e8:b9:d4:c2:a4:c9:a7:cc:4c:bf:95:6d:7f:73:cd:
19:11:3f:29:61:3f:52:ec:f7:78:81:30:cf:53:33:
18:b5:91:10:55:a3:47:a3:e4:f3:a7:a4:54:67:c4:
5c:3a:0a:a4:d3:0d:b1:ec:08:23:9d:be:b2:5d:7a:
b7:58:45:35:1b:b6:a6:dc:ac:03:b5:0c:0b:01:c3:
bc:45:eb:45:cd:21:be:f7:d6:eb:50:8c:96:f5:fd:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DB:90:1F:D9:42:23:6C:39:7E:86:54:73:54:D4:AE:67:98:2B:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe2cb0f5-cd23-3baf-9209-a35451e05a7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.83.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:b3:c7:85:68:fb:74:fb:15:73:84:2f:f2:b2:76:ff:5d:c6:
dc:36:de:73:83:33:bc:82:ac:43:91:c5:dc:6c:22:ba:c9:e4:
67:ac:ce:99:e2:4b:f9:3b:bd:d1:03:e9:b9:60:cb:30:f6:b0:
1a:ea:ad:61:4d:65:6d:70:f8:ce:4d:28:69:e2:5e:36:aa:5d:
cd:7a:c6:a0:1b:e8:d7:c7:2b:86:ce:f9:6b:43:fb:16:14:9b:
8c:a7:e0:e1:e6:77:6a:4e:6f:47:3a:af:44:fb:39:ad:61:ad:
55:86:ce:db:4e:8e:9c:fd:d9:5d:3f:8c:35:bc:29:84:ed:a7:
99:6f:43:1b:c8:bf:05:21:f5:83:f4:00:67:1d:49:54:26:5c:
2d:35:dc:73:6f:03:e8:bd:a1:67:8b:5d:3a:a0:4d:2d:81:7b:
7c:87:db:26:a8:35:50:b2:97:c1:04:6e:12:23:26:da:26:be:
85:6c:03:4f:e2:0f:ec:62:1e:d9:fe:34:4b:64:bd:53:88:eb:
da:c8:0b:47:7b:25:42:3d:34:ec:d1:df:4b:16:04:82:7a:de:
74:f0:37:d2:54:e3:71:7b:7b:e9:de:19:b3:15:39:73:3a:6b:
7a:57:92:7d:b6:2c:45:dc:38:41:65:28:3e:d2:4b:a7:55:2a:
e8:b1:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:33:04 2025 by rpki-client