Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e4306eb-22e4-3839-8268-e4833f59e45c.roa
File: 0e4306eb-22e4-3839-8268-e4833f59e45c.roa (raw, json)
Hash identifier: oebvHO5PbxWsj/tv6cLThYPhZ8NKmScHJeEGwa75dcM=
Subject key identifier: 2D:64:D7:5B:A3:77:A0:BE:F1:25:15:CF:0B:E4:34:21:45:B0:C8:74
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2241B8468FEE19D27174C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e4306eb-22e4-3839-8268-e4833f59e45c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.154.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:22:41:b8:46:8f:ee:19:d2:71:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=74d68295-efca-4d9c-9a03-48d2bea6995d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:54:f4:21:0c:56:a8:97:8a:e8:79:39:be:
45:a1:8b:bb:ec:86:27:c6:84:31:24:b8:a8:9a:97:
17:d8:e2:0c:1e:7e:15:ee:70:3d:a8:7b:36:b8:69:
ce:20:fe:2c:c0:9e:42:81:28:32:9f:ba:61:11:b3:
ec:96:d3:9e:4e:11:ac:85:1d:a4:05:6e:b3:a9:ff:
ab:36:1c:41:2d:d4:9a:f3:a2:4c:d1:85:6c:8a:48:
31:d6:30:b8:ce:09:c5:b4:76:67:ab:4f:45:d8:44:
b4:0c:66:20:38:bd:da:75:b1:8c:36:03:42:f3:24:
83:7f:a2:75:f2:bb:a1:a0:a2:77:14:0d:ac:32:1d:
10:e4:42:8e:b3:52:66:cf:5f:7a:51:df:08:ef:77:
78:bb:39:81:81:ff:12:79:d4:f1:9e:c8:c8:70:b9:
72:6a:63:60:54:65:e1:a3:cc:99:dd:54:e8:7b:85:
de:15:92:4c:16:f9:af:a5:02:56:14:80:a6:27:ef:
69:19:95:e0:fc:bc:3c:92:78:9e:9a:76:6d:96:d4:
6c:fc:47:a0:d7:ca:df:4c:dc:0f:e0:69:20:d4:ec:
32:90:e4:f4:a8:24:43:78:56:e8:bf:45:fc:11:2e:
9b:c5:6f:91:8a:2e:ec:4f:f9:2b:d0:d7:4a:60:25:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:64:D7:5B:A3:77:A0:BE:F1:25:15:CF:0B:E4:34:21:45:B0:C8:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e4306eb-22e4-3839-8268-e4833f59e45c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:64:3e:9c:e3:fd:1a:80:8a:c2:d3:e9:63:0e:c4:ca:d1:a5:
ff:10:d2:ed:49:a2:81:b6:57:27:5d:79:18:07:96:66:f7:71:
2f:ef:cf:55:80:d1:90:79:de:b4:c2:b3:9b:a1:7d:b7:22:19:
86:62:ba:90:9d:ae:1a:87:10:bf:cd:48:5a:89:8d:15:4c:1a:
1a:07:33:d7:0e:e3:87:70:a0:2c:56:b9:66:d4:dd:90:0b:4d:
e0:f5:50:23:06:d7:f1:00:b6:02:cb:80:71:5a:c5:4e:37:d4:
c4:f3:8e:51:96:0c:87:f2:fc:26:aa:0a:1c:05:4e:43:ad:c9:
28:e0:75:1c:8e:ed:fb:9c:12:aa:46:5f:7d:5f:1d:15:78:a6:
be:43:53:40:29:4a:79:df:0d:99:34:76:11:42:18:5b:bc:a4:
bd:9b:9b:a5:1b:9f:38:fc:3e:4c:7c:15:25:ec:c5:6d:b5:a1:
cd:62:d9:1e:e1:00:b8:17:5d:27:d6:76:b2:d7:b0:c8:1f:ee:
c1:95:8d:cf:7f:4b:a1:9a:38:ef:de:07:fd:e7:fb:47:c3:c1:
fb:18:c8:55:ca:b2:50:a7:e1:ba:44:3e:d2:ec:8c:5b:6e:23:
d3:3d:40:b4:52:fc:20:1e:c1:ce:33:ec:8f:81:e3:43:d6:cc:
87:47:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:48:50 2025 by rpki-client