Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/70e6d7e3-0d86-3b39-ae52-711f943e3d2b.roa
File: 70e6d7e3-0d86-3b39-ae52-711f943e3d2b.roa (raw, json)
Hash identifier: NTq4wFaa+V6mc+e8AeVK72hbVnjwCaNrf+0pILATWaw=
Subject key identifier: 8D:C4:F0:F4:16:A1:AA:85:F6:52:0C:4F:B5:04:B7:42:2D:0D:31:E4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847FF4A740E41DF687EBF979680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/70e6d7e3-0d86-3b39-ae52-711f943e3d2b.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36383
IP address blocks: 104.135.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:74:0e:41:df:68:7e:bf:97:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=d09709dc-cbbf-498e-b493-765e853aa322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:f3:b8:68:a7:54:db:1d:ce:3c:6b:fe:de:
47:1d:41:2c:17:7d:c0:56:88:03:47:ee:84:30:ee:
5d:a9:3f:6b:8e:ac:16:46:0b:41:3a:00:e4:93:20:
95:03:6d:6a:b9:85:ad:4b:2c:a5:88:e2:fc:c6:b5:
ef:f8:af:12:c6:02:06:43:18:a6:ed:a8:7f:04:f0:
26:a8:a8:da:fc:f4:e8:f4:9a:cb:90:ac:ab:1a:43:
62:9e:c6:ac:31:38:8f:d9:f6:a7:4c:b3:1e:b3:a5:
e3:67:16:7d:55:1f:f0:05:04:d9:b5:67:c8:12:28:
60:2d:98:13:2e:fc:03:44:af:68:4b:8e:de:16:5a:
5c:57:9a:32:0c:b0:67:f6:6d:52:52:17:ba:a1:50:
bd:42:dd:fe:5b:08:35:b9:e0:94:86:f4:ba:ce:2a:
b2:6f:d8:c4:21:7f:75:a0:e3:43:dd:d7:0a:29:4c:
cf:ff:c2:06:33:1d:06:3c:87:de:09:89:24:88:0e:
6a:6d:89:3d:58:7e:ec:a2:46:be:84:51:71:8b:89:
f0:b6:65:2a:f2:af:77:7f:be:cb:64:7d:ce:65:e4:
01:de:01:3c:22:d9:bb:3c:e0:e5:56:3c:a7:d4:ca:
9c:a9:bf:2a:86:5a:17:1d:11:14:18:ff:3e:cd:17:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:F0:F4:16:A1:AA:85:F6:52:0C:4F:B5:04:B7:42:2D:0D:31:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/70e6d7e3-0d86-3b39-ae52-711f943e3d2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:6d:cc:60:e0:3a:99:17:20:9c:0d:d8:48:4f:92:de:52:50:
a1:1d:b1:cb:2a:da:ff:60:84:5b:65:d6:80:a7:5a:d6:ac:9b:
13:2f:ed:7c:a6:fd:00:bf:24:15:bf:14:3c:35:58:55:76:53:
3a:78:d6:cc:e8:ba:70:52:b3:c4:81:c1:1c:01:25:7e:8d:3c:
63:60:17:25:bb:47:92:b1:2d:6a:85:78:f5:66:ad:d6:4b:1f:
2c:65:5d:28:f8:10:24:d0:2e:7a:df:a4:54:be:92:39:00:10:
8a:87:08:f4:4e:8c:b4:ba:03:6f:78:d5:91:88:a1:6f:ec:a4:
32:a5:8f:3e:3f:25:9f:98:da:b1:1c:1b:c0:9a:be:70:09:75:
4d:0e:7a:e9:5b:61:08:cc:79:16:a4:1a:2d:d1:1c:fd:e6:1b:
4b:fb:fa:6d:2e:2d:05:32:13:8c:5c:95:b1:26:65:93:b2:e3:
58:e9:bc:ca:80:2c:77:7b:03:d0:13:c5:47:bf:54:ff:c6:01:
87:e3:00:cc:06:be:eb:e9:bf:8e:36:b6:fb:66:d9:af:c0:54:
3b:bb:5c:02:c7:bd:fe:03:53:c0:f1:fd:6f:76:8c:ee:b1:8c:
de:cb:0d:cd:24:19:48:e9:76:3f:a4:bc:0e:e5:b9:d1:ec:3c:
d9:d7:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:26:07 2025 by rpki-client