Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25dc0bd2-3f3f-3f87-8dec-f87a1b764f74.roa
File: 25dc0bd2-3f3f-3f87-8dec-f87a1b764f74.roa (raw, json)
Hash identifier: Tz+fcvEGyL2ESuot237ho2/Lqn30N1rw4mS9Y6gE6JQ=
Subject key identifier: 3A:92:29:5A:35:6D:8C:98:EE:7E:F9:1D:D5:A4:D2:B3:CC:AF:87:C5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FB521C80EF226EE3BA2600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25dc0bd2-3f3f-3f87-8dec-f87a1b764f74.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.154.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:52:1c:80:ef:22:6e:e3:ba:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e46c3123-b509-474d-9d62-a64df184fbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:73:30:53:20:cf:06:12:6f:65:e2:df:e6:
30:06:04:bb:f7:ca:a9:b8:c0:94:6a:20:80:2a:6c:
cd:76:a5:1b:96:d8:dd:86:cc:1d:79:19:3f:99:21:
8b:9d:37:6b:ef:e9:2d:f1:33:63:55:04:1c:d0:4e:
47:d1:d6:84:94:9f:d5:34:de:5e:7d:f2:20:66:63:
ad:68:72:8b:a6:e5:ec:b0:58:30:dd:35:94:c1:65:
ce:ac:be:0e:e0:06:d1:80:94:d2:6b:27:a0:9c:56:
7a:c5:9d:f9:29:41:35:e5:cc:23:2a:68:b4:a6:0b:
70:06:58:45:ea:40:c3:0b:5e:ac:c8:a7:c1:21:8e:
e2:d6:2b:82:4a:46:3e:7a:7b:01:3b:3c:5f:71:f5:
a7:fa:6d:d8:fb:89:9f:1d:d2:15:12:f2:f1:c6:7f:
5a:9a:7f:b9:99:06:c7:aa:cf:c6:8a:ca:c4:fe:f0:
7d:f2:75:5f:9b:d3:0e:f2:ce:cc:6b:45:a7:66:45:
51:db:b5:70:9e:7a:be:88:37:4c:2c:e9:9f:9a:d5:
b4:08:a5:2c:97:41:3c:ae:3f:70:5f:dc:b7:bc:ed:
24:3e:fe:36:06:db:f1:b3:da:37:ba:49:f9:40:0a:
5e:fe:79:85:6a:e0:67:31:16:e0:29:f7:0e:ad:2c:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:29:5A:35:6D:8C:98:EE:7E:F9:1D:D5:A4:D2:B3:CC:AF:87:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25dc0bd2-3f3f-3f87-8dec-f87a1b764f74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:b5:a5:c0:6d:33:c7:39:52:07:30:eb:f6:be:62:a3:5e:2b:
8e:fc:4a:56:a9:6a:db:f0:78:48:51:d3:4e:60:8a:7d:b7:df:
dc:44:8b:98:45:1a:a1:23:5a:90:05:b7:c0:eb:62:aa:af:37:
f4:f8:3f:08:c1:6f:33:9e:95:d3:90:17:f8:72:c0:d2:f9:1e:
02:59:94:fe:f4:fb:85:9f:b0:b6:74:02:ab:17:db:d3:2c:0e:
b4:21:7a:03:b1:c6:d5:e3:08:ca:d7:dc:52:fb:8d:ea:fe:a9:
5c:ee:2e:6b:04:78:32:c4:dc:80:27:81:31:e4:6f:b5:79:56:
3b:62:d2:a2:61:c5:38:12:dd:6d:e9:37:cf:43:c6:23:dd:b8:
c3:c6:32:30:a9:c9:ca:72:be:e8:82:80:78:f4:ee:0c:76:77:
37:fe:45:59:e0:5d:8b:b9:21:e7:a0:b2:8b:3f:1c:e3:dc:b0:
e1:ac:df:74:d4:8e:8f:b1:dc:f8:e9:60:ab:4f:9e:cd:73:b0:
31:ac:77:ac:10:4b:c1:67:c4:37:9b:5e:17:e0:ba:ae:3d:f9:
44:5f:55:68:20:a5:c9:6b:54:2a:ff:44:d3:ca:8d:86:cf:5d:
d0:87:f1:2c:b3:4b:2f:ac:a4:55:ab:63:22:15:98:f6:ac:66:
20:27:f5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:19:00 2025 by rpki-client