Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1268a725-1a98-3f54-805e-132a20679a49.roa
File: 1268a725-1a98-3f54-805e-132a20679a49.roa (raw, json)
Hash identifier: 7tZylJby4neXnn/E3e7zldni6BuPzqFyhbfa+3xwM30=
Subject key identifier: 02:2B:F4:F9:72:F3:06:34:DB:CC:29:75:04:8D:7B:5F:3E:15:A8:D6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A16AC568CC42CA880152500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1268a725-1a98-3f54-805e-132a20679a49.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.198.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:ac:56:8c:c4:2c:a8:80:15:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1b067b6b-df9d-48fa-a54c-06c3a1ae6438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:5d:c4:41:d0:e6:60:4c:96:3f:a1:54:dc:
b5:63:69:41:08:41:57:76:56:39:e3:03:8c:6c:7f:
97:26:a8:eb:39:0b:e8:14:ce:ec:fa:1f:ed:71:14:
e7:60:9d:2f:1e:66:04:21:6c:2b:f6:05:b9:db:b9:
40:1f:53:78:48:fd:52:77:08:d3:51:d3:a1:87:84:
5f:b3:c9:e1:62:d9:46:a7:cc:c2:2c:f2:9e:0d:95:
a6:3a:23:69:8b:ce:29:1a:9b:20:61:08:d2:91:2b:
01:92:8f:d9:9b:2e:52:96:62:94:de:89:10:42:08:
95:7c:5a:06:47:bb:ad:37:90:6a:21:15:a6:a7:09:
3c:c7:d7:d0:db:0c:32:65:4f:95:bf:e1:0b:1d:1e:
2c:a3:86:65:b3:1e:0b:44:cf:34:4d:49:5f:90:6f:
78:d4:ca:ec:d6:91:e5:dc:fd:24:ff:19:7a:8a:89:
b4:4b:b5:7d:3a:26:64:ca:ff:1d:f9:33:61:b3:d5:
e8:f5:54:48:68:3f:f8:d9:d2:b1:57:af:c5:80:c7:
95:26:3a:08:b4:b8:cf:1a:ed:b2:88:01:69:c4:b5:
d5:b9:c0:76:95:35:09:08:d5:d8:39:2d:2c:e1:0e:
de:76:14:9f:5e:23:a3:45:88:c5:e8:a5:6b:0a:84:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2B:F4:F9:72:F3:06:34:DB:CC:29:75:04:8D:7B:5F:3E:15:A8:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1268a725-1a98-3f54-805e-132a20679a49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.198.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:8f:45:c3:c0:31:7b:27:dc:3c:4b:e4:2a:43:ea:19:70:4b:
05:5b:ff:89:e4:c0:65:b2:98:7e:60:96:14:8c:f4:3d:7d:c5:
f4:f8:a0:fa:ec:f4:5b:ef:bd:d9:ab:bf:9f:9d:84:69:66:3a:
16:dd:ea:a1:f7:01:eb:16:5b:55:0c:c3:1a:cb:b1:ab:74:6b:
15:c9:90:d8:5a:aa:61:6e:2f:3c:12:9f:5f:fd:92:62:89:0a:
d8:8c:2e:6e:84:81:63:65:e2:48:d9:fa:f7:1c:86:d5:62:73:
61:13:a1:18:c9:37:02:d6:3d:19:f0:5f:16:97:48:da:2b:54:
09:b0:8f:3d:bd:6d:4d:45:e7:f2:e1:03:d2:54:1d:23:34:f5:
65:71:fc:9b:e2:9b:08:30:2c:11:b4:b1:dc:f2:a7:27:29:1a:
79:1c:d3:7c:15:82:7c:86:1e:24:2c:90:82:b2:33:5c:47:62:
5c:03:a8:b8:ba:d3:37:0e:67:8a:3c:cd:3b:ad:9d:5b:e1:1d:
dd:73:07:1a:d5:d5:dc:e9:c7:1c:e5:ed:a5:20:af:70:15:9a:
7a:6e:20:69:bc:2c:bf:bc:37:56:e6:eb:f8:00:6b:6c:47:c6:
68:b6:f0:53:46:d9:1b:a5:2d:07:5d:cc:33:2e:f4:4c:82:2e:
74:88:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:44:44 2025 by rpki-client