Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1fb963ca-dfb1-3596-bd1b-9b13f7f95535.roa
File: 1fb963ca-dfb1-3596-bd1b-9b13f7f95535.roa (raw, json)
Hash identifier: nWEkjQW75EDFIiHyHeoLutZdCjP8nKoIcpixtnAju6c=
Subject key identifier: 7D:8B:9C:A7:91:00:2E:A2:73:80:3C:3C:BF:E8:A2:64:E0:B7:3D:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1F3400F803E681015C1200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1fb963ca-dfb1-3596-bd1b-9b13f7f95535.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.199.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1f:34:00:f8:03:e6:81:01:5c:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=162ab6a0-abd1-454b-a6a6-84d05b44713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:db:c2:3f:b6:f5:56:0a:b0:05:57:a2:68:
07:e7:68:92:8b:19:9c:2f:10:15:f9:c7:87:68:4f:
a7:ac:4e:07:0f:09:56:47:49:0a:98:a9:17:a3:44:
e3:b8:67:70:11:82:94:60:c8:b4:ae:a7:c6:79:cb:
55:38:e1:b3:03:60:d4:b4:dc:f2:92:d7:31:ea:3d:
05:f3:5f:2c:47:c0:dd:6b:46:7e:1e:d9:74:8d:94:
43:1f:e7:62:fa:cf:3a:24:e5:08:ac:1e:f6:ff:b8:
b3:09:1a:06:da:44:fb:4b:6e:3d:f0:21:9d:11:9a:
33:60:4e:32:28:aa:cf:a7:21:19:d7:6c:50:77:bd:
e3:65:de:d9:d2:ed:02:95:5a:82:7f:d0:f2:6a:5e:
ad:f0:73:56:47:af:87:94:1c:ea:92:a2:3c:65:77:
e2:21:b5:63:ed:ef:d5:f1:94:13:8c:e8:f3:8a:71:
55:72:41:f7:ce:cd:e6:c2:10:f3:1c:25:43:21:46:
c1:c5:60:ae:f6:85:a7:04:c0:3b:0a:04:b2:2b:81:
d7:8a:56:bb:cc:af:23:bd:ce:91:3a:be:a6:4a:9b:
f9:cd:56:7e:75:05:8e:f2:6b:d1:24:49:f0:f9:b5:
ea:55:fe:bb:81:f0:77:84:0e:36:5a:e3:a1:83:03:
c1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:9C:A7:91:00:2E:A2:73:80:3C:3C:BF:E8:A2:64:E0:B7:3D:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1fb963ca-dfb1-3596-bd1b-9b13f7f95535.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:e8:19:1c:cd:74:02:be:8e:5f:78:1f:22:7f:5a:27:17:3e:
df:a8:95:21:1f:8b:92:e0:19:b4:a4:24:81:a6:da:5a:2c:d8:
ae:4e:64:83:48:97:e3:8d:b4:89:38:9d:0a:cd:2b:57:f9:f1:
00:34:b9:25:1e:79:f0:28:5c:2b:5f:d9:0a:e2:14:55:96:04:
af:72:03:4b:0e:1a:c1:a5:a8:cf:d8:a0:a2:fd:8c:76:b4:4d:
2b:e7:9b:05:b7:ac:db:1a:b6:58:d3:57:e9:b0:80:61:fd:83:
b8:43:a4:b6:75:66:f1:bd:eb:f5:3b:ab:09:96:cf:46:62:b1:
b2:98:94:6a:92:5c:af:dd:b2:9c:19:87:5b:38:89:94:1a:58:
1e:5f:df:bd:30:de:f3:81:ad:c7:c3:96:bc:9d:e9:3b:3a:20:
d9:66:d2:d4:ec:f9:bd:33:35:1a:4e:05:2b:00:f8:1c:d6:8d:
80:fc:62:ab:79:7b:ba:af:21:e9:f0:28:ed:21:53:1d:b9:07:
c9:00:96:ff:9c:68:18:e7:da:b4:33:f9:ba:a4:74:9c:3f:e5:
2c:b6:9c:e2:80:6e:73:b4:20:ad:db:d6:32:4d:a3:a1:ef:16:
c4:5f:1d:58:d2:c9:e5:ea:eb:4f:5e:36:04:46:e9:4e:89:a9:
b6:b5:d4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:42:06 2025 by rpki-client