Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ca536bed-6486-37d7-bf7b-b94630a16290.roa
File: ca536bed-6486-37d7-bf7b-b94630a16290.roa (raw, json)
Hash identifier: NzfojlNF97OZeX4nLdRewjqC6xVnsk7pg6BB7ZsNHtQ=
Subject key identifier: 99:4F:F7:F3:39:7D:11:F2:03:F6:6D:B7:48:EA:91:1A:71:57:AF:DA
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F4328583A208152958A96E9C8E6E3E2C0
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ca536bed-6486-37d7-bf7b-b94630a16290.roa
Signing time: Fri 14 Feb 2020 05:00:00 +0000
ROA not before: Fri 14 Feb 2020 05:00:00 +0000
ROA not after: Tue 05 Sep 2023 04:00:00 +0000
asID: 213122
IP address blocks: 104.36.84.0/22 maxlen: 24
216.126.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:20:81:52:95:8a:96:e9:c8:e6:e3:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: Feb 14 05:00:00 2020 GMT
Not After : Sep 5 04:00:00 2023 GMT
Subject: CN=97ac928b-a971-454c-b077-71c5125f7d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0e:92:12:d5:2b:e5:c7:10:6a:f2:1c:a6:35:
ff:89:2f:62:50:9d:03:7b:be:35:77:9b:3b:48:6c:
21:f0:2d:da:29:d8:2a:3f:19:41:1a:b9:5d:3f:1a:
87:ac:ba:f7:53:78:e0:60:b7:5f:3e:a5:57:ee:39:
00:b1:32:2c:7c:76:c2:27:4e:b5:12:df:b5:44:69:
db:77:dc:06:ff:27:a4:ba:a0:46:47:2e:79:29:c3:
8e:19:57:92:80:b5:5d:3d:66:1b:f3:6f:5f:41:3e:
89:04:0e:4f:cf:81:f7:49:cb:3b:2f:5e:a6:37:06:
20:ce:fa:ed:d6:17:f5:2a:48:f8:25:e9:2e:cc:ac:
90:71:c1:bc:19:39:2b:e7:95:58:ce:78:41:e3:cd:
5b:6f:f1:8d:6b:87:d3:88:9c:b6:5e:77:36:39:db:
5d:de:57:86:23:40:54:7f:44:34:76:6c:ba:90:25:
9b:25:1f:eb:a6:76:4d:82:66:fb:03:66:0f:21:b7:
b6:ed:ea:d8:1f:65:8d:a4:75:42:87:cc:e1:c4:3c:
52:65:a4:a6:b2:e8:0d:d9:b0:69:e5:b7:b5:e4:71:
0e:de:fe:55:7f:d0:ac:63:af:8a:b9:3d:53:9f:24:
23:98:72:07:af:46:34:45:18:2c:a8:b3:78:e8:0d:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4F:F7:F3:39:7D:11:F2:03:F6:6D:B7:48:EA:91:1A:71:57:AF:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ca536bed-6486-37d7-bf7b-b94630a16290.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.84.0/22
216.126.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:c1:12:59:34:c4:69:71:78:2a:87:c2:f4:23:56:01:04:c7:
d6:fc:ee:68:2a:01:fd:0f:b8:67:fc:0e:07:d9:45:8d:d6:3b:
8b:02:ac:19:b2:c0:65:d5:71:39:59:7a:9b:d1:12:72:c7:7a:
2e:da:c4:32:8f:11:0d:c6:40:5e:3e:80:d8:f5:13:39:b5:2b:
18:28:24:83:2e:81:1f:6e:03:84:63:4f:1e:9b:3a:99:48:06:
bd:c7:a2:e1:9d:05:ae:ee:a7:42:d9:f4:75:8d:88:ee:b4:75:
9e:7f:6a:cc:a0:12:66:c3:65:68:01:1c:7d:74:60:55:54:46:
ef:1f:30:3f:95:82:b8:a0:09:e7:8d:f5:21:e9:db:8a:de:4f:
bf:58:09:8c:26:6c:ed:27:6f:66:38:a0:18:8b:5a:2b:71:a5:
1a:6d:d0:d0:35:be:86:77:c8:87:77:08:b5:c5:b3:52:ef:f2:
b3:bb:78:3c:51:44:e7:80:af:34:1e:c5:22:7c:81:bd:ab:05:
b7:78:70:c5:54:26:e6:dd:7b:94:bc:89:dc:b5:94:31:d2:54:
83:84:32:e4:ae:3b:20:0d:f7:29:06:b1:95:2c:ab:e0:16:33:
eb:41:a1:d6:bf:ec:c3:84:59:c4:26:9b:32:e6:57:b8:40:9e:
05:05:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:02 2025 by rpki-client