Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/295ab4b9-277e-3462-a1d7-f7591fe87d7c.roa
File: 295ab4b9-277e-3462-a1d7-f7591fe87d7c.roa (raw, json)
Hash identifier: Rwjb9msSR/iZa3yF5G4kLiO+bG2OMeA4F1sA7bL/uiM=
Subject key identifier: D4:FF:46:9D:79:05:9E:58:99:93:69:21:78:6D:C8:81:72:91:8B:13
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F0FDB56146BF775CF11780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/295ab4b9-277e-3462-a1d7-f7591fe87d7c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.196.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:fd:b5:61:46:bf:77:5c:f1:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e28a4a5a-c0e5-4f31-a5c0-292217523cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:ff:95:9d:06:8f:3f:db:53:6c:51:20:ba:
f4:43:06:43:92:3e:f7:85:20:a7:ef:33:9e:bc:c4:
b8:54:cc:0d:4b:e0:62:dc:bb:6a:af:2c:3f:f7:1e:
ad:46:00:4f:19:4e:9b:fd:0e:5c:4b:a5:07:36:3a:
01:ad:8b:9e:de:6e:61:1d:f6:d8:cd:c4:ec:65:46:
27:5a:f7:e2:cb:b8:c4:6f:68:ec:08:63:42:61:7d:
7c:e2:12:2f:4d:3f:33:2a:00:5d:30:6a:d4:09:13:
4f:ae:08:4e:f5:e2:9e:bb:29:e2:b2:be:9a:47:f5:
66:a3:81:c8:d2:a8:c3:22:d1:41:d8:ff:df:a6:70:
4a:42:17:fd:68:7f:a2:df:5b:b7:14:eb:cf:58:9d:
57:c5:38:8e:ce:cd:02:d7:e0:50:19:51:e7:5c:03:
f6:44:d1:5b:7b:ff:55:9a:4d:eb:3d:80:51:42:2d:
97:13:11:1e:ff:5e:9e:fc:c1:30:cd:3c:8e:f2:b7:
62:17:50:54:58:f8:e2:cd:16:ac:85:3e:ab:f3:5e:
b2:2b:58:8a:32:b7:3f:8b:1d:84:6a:27:20:ca:9d:
c6:22:d9:c8:7e:bb:9d:82:bb:a4:0d:84:ac:ce:6a:
35:6a:e2:7b:07:96:4c:a7:42:a8:27:35:37:ce:ae:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:46:9D:79:05:9E:58:99:93:69:21:78:6D:C8:81:72:91:8B:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/295ab4b9-277e-3462-a1d7-f7591fe87d7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:00:63:d9:34:cf:3b:60:33:f5:9f:6c:f8:fe:92:a5:ce:95:
b1:56:77:af:2f:2f:e1:e4:72:c9:c4:a3:d3:98:ef:cf:3b:16:
f5:53:48:70:93:b8:ff:f7:a0:38:37:09:50:ae:37:c1:b7:52:
3d:95:b3:af:c8:4a:1c:0a:b5:a9:20:e1:69:36:db:b9:64:96:
47:16:20:1a:81:43:b2:7f:20:d3:30:ff:67:0c:43:08:6e:93:
a7:3b:e4:dd:08:06:88:ba:7c:64:5a:c5:36:c2:e9:7c:0c:e9:
88:30:05:d8:be:c0:56:35:cc:d1:47:36:44:da:ee:b3:57:46:
2d:0b:12:d8:5e:3f:77:80:11:22:5f:d4:ca:a9:5b:e8:f3:35:
fe:2b:0c:45:ac:3c:80:83:93:c7:f7:be:27:b6:a9:e6:90:ab:
e6:11:e4:36:70:b8:5b:b4:90:09:79:8a:0d:9f:b5:e8:ca:4c:
35:d6:e3:c8:d7:f5:f2:48:47:82:31:2e:e3:74:f5:83:fb:ff:
23:64:07:6c:90:81:55:b7:99:2e:0c:3d:8e:86:89:50:1e:e3:
20:21:87:91:a9:bb:f2:28:5e:7f:82:85:d5:65:5b:3b:32:a7:
09:f4:31:c6:43:81:68:0b:c3:3b:f8:12:e6:fe:1e:66:70:06:
80:e9:4f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:48 2025 by rpki-client