Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/9ebdd42b-1036-38ac-a93d-c8db1bdbaf1f.roa
File: 9ebdd42b-1036-38ac-a93d-c8db1bdbaf1f.roa (raw, json)
Hash identifier: icwRPpqWI62xzSiheMXBA9FnKyNNuVXcRq1BhRwajJA=
Subject key identifier: 7A:14:83:85:B0:DA:D8:67:3A:8A:AB:95:C6:99:07:61:D5:4B:02:B5
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F432858375022A2EAF0FFD1857934DB80
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/9ebdd42b-1036-38ac-a93d-c8db1bdbaf1f.roa
Signing time: Mon 13 Jan 2020 05:00:00 +0000
ROA not before: Mon 13 Jan 2020 05:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 103.246.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:50:22:a2:ea:f0:ff:d1:85:79:34:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Jan 13 05:00:00 2020 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=e459fea5-7d49-44a8-8a54-c7b103654fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5b:e0:85:67:38:29:7a:3f:db:51:0f:79:f4:
9e:5a:0a:61:24:35:12:18:e9:0f:53:f1:7f:ba:ed:
58:da:ed:73:b6:4d:5c:d4:8d:81:a4:23:4b:cd:3c:
7d:c0:59:53:94:e1:cc:2d:2b:91:18:49:fe:5c:10:
20:36:7b:b9:47:70:fa:46:16:0f:35:51:4d:2a:fd:
9f:db:a7:a4:d4:05:14:d7:8b:98:bf:71:ad:87:d3:
7f:2d:43:e3:f3:bd:bd:e9:67:04:62:84:b2:1d:e3:
d4:52:7f:48:49:b4:36:27:a3:f2:64:b5:f9:58:e5:
9a:52:9a:c6:cd:a2:a3:90:b8:b0:a0:89:af:a0:e2:
47:e3:e4:dc:ff:6b:0f:5a:9f:5e:2e:d7:cb:3e:5a:
d7:e7:0b:09:34:4b:50:c2:56:00:68:40:37:91:68:
c6:57:77:8d:c8:b1:66:b9:2a:4b:29:a0:5e:1c:95:
55:99:9c:fa:ce:bf:0b:d1:99:94:b9:98:65:eb:c4:
cd:3f:be:07:c0:eb:08:29:95:d4:68:2f:b0:d4:76:
76:a4:b9:52:ec:9c:e7:e1:64:c6:cc:18:9a:89:59:
48:54:58:05:c5:e9:a2:e3:0e:ee:8a:9c:1b:36:19:
21:3e:de:93:59:b0:0d:33:90:10:be:84:b3:fa:7e:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:14:83:85:B0:DA:D8:67:3A:8A:AB:95:C6:99:07:61:D5:4B:02:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/9ebdd42b-1036-38ac-a93d-c8db1bdbaf1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
103.246.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:75:7d:39:64:59:f8:a6:9f:17:0d:fa:ac:83:22:83:06:1b:
53:8d:9a:cd:30:b5:f3:28:3d:a5:a9:ed:2b:fe:62:28:bd:d8:
c8:39:c8:97:4f:fc:78:3f:de:6b:43:9f:5c:07:cc:95:ea:3a:
6e:22:f1:91:26:cc:e5:7f:6a:a8:b9:9b:6a:54:28:3e:42:9b:
97:9b:08:25:d7:42:22:fe:1a:25:2c:e0:be:34:4e:90:a3:ae:
a6:e5:aa:f6:87:57:af:88:a6:f2:57:0d:2d:24:4b:51:7e:1b:
f0:e0:f4:b9:29:7b:da:9c:b0:f7:41:a3:40:6f:71:e5:16:c6:
d8:1b:1d:9b:6a:f6:3b:e5:7c:ae:45:02:5e:a3:23:45:0d:28:
8e:cd:08:ea:6f:e2:b1:4e:be:ed:d1:2c:87:a8:45:a1:fe:6f:
d0:6e:d8:51:a2:90:f7:ff:54:11:0d:4b:a3:ff:0a:73:56:14:
2e:6c:ee:1f:4f:87:8a:c6:f7:f5:d7:a7:c8:87:a6:c4:5e:50:
6d:90:e5:2c:9f:a7:a7:2e:10:4c:ee:99:ac:97:36:55:e8:f0:
12:2c:00:88:a9:2c:d8:27:a9:5f:b7:4d:66:fb:92:eb:bc:98:
20:d0:fb:55:63:17:42:13:55:56:7f:a7:d5:c7:9e:86:ee:77:
1c:ff:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:52 2025 by rpki-client