Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e8d803e-3436-385d-bc1b-79666a6d1a62.roa
File: 2e8d803e-3436-385d-bc1b-79666a6d1a62.roa (raw, json)
Hash identifier: zWXf5iDx7r05x/XEoOtRSXIkPGLhdfWZ7UkDQqXHkjk=
Subject key identifier: 6F:E1:48:DA:CC:45:52:41:8D:D4:F7:D8:35:6A:89:4A:6A:03:73:7E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584322C41C5B8AD10A0331DC5900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e8d803e-3436-385d-bc1b-79666a6d1a62.roa
Signing time: Tue 05 Sep 2023 12:00:00 +0000
ROA not before: Tue 05 Sep 2023 12:00:00 +0000
ROA not after: Sun 29 Dec 2024 05:00:00 +0000
asID: 396982
IP address blocks: 107.178.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:22:c4:1c:5b:8a:d1:0a:03:31:dc:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 5 12:00:00 2023 GMT
Not After : Dec 29 05:00:00 2024 GMT
Subject: CN=839dcb4b-cbc1-4089-ae73-9175da8f7c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:90:0a:f0:17:95:f5:28:d1:e6:f2:ea:9d:
ab:98:84:f1:b9:7f:9f:5e:f3:ba:c4:c4:16:c8:d9:
ce:6f:8f:2b:df:73:e9:70:75:aa:84:85:ce:fa:33:
3b:db:b5:4d:e4:48:7b:0e:38:0f:ce:28:1f:1b:e7:
67:36:73:25:1b:61:d0:3e:bb:f9:97:84:1c:b6:a3:
c4:8a:84:7b:7f:e0:9b:4c:7c:d8:be:88:4e:bb:0c:
f3:33:00:25:6d:75:0b:df:c8:3f:f0:71:be:51:1d:
39:65:74:25:53:6a:01:6c:05:75:93:df:bc:5c:ef:
15:e2:5e:3a:c3:98:e4:77:ea:ac:aa:0e:ec:45:d5:
db:37:95:74:7e:fa:70:c3:d0:8b:9c:f2:9f:79:c2:
f8:96:c9:8a:21:64:02:04:33:d7:dd:c4:37:68:ce:
d0:4b:e7:54:56:f5:36:6f:59:d8:04:fa:2a:79:94:
3e:86:7b:99:7d:6f:9a:24:58:c5:dc:04:74:25:cd:
11:0c:a6:11:ee:34:05:bb:f4:88:2b:89:61:a1:af:
b9:4c:36:b8:da:9d:dc:c2:43:f9:0c:0f:bb:c8:0c:
db:0f:b3:f6:fb:a3:4e:c7:5d:35:c4:78:43:01:32:
14:4b:9f:46:77:5e:6f:86:76:88:28:12:1e:18:b5:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E1:48:DA:CC:45:52:41:8D:D4:F7:D8:35:6A:89:4A:6A:03:73:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e8d803e-3436-385d-bc1b-79666a6d1a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.178.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:89:9c:6b:a4:d6:74:bd:48:be:3e:22:da:e7:d0:98:3b:4b:
20:61:29:29:e6:8d:c9:41:35:8b:cc:7c:2d:5e:00:ae:bd:23:
38:af:f8:5a:bf:1a:e8:b4:34:6c:56:07:97:21:ad:89:e0:52:
3b:4a:28:dd:d1:8d:1b:ec:fa:52:73:2a:78:d5:7d:c5:20:63:
7b:79:00:a0:31:fa:32:3d:21:a6:31:61:f2:f3:a5:bc:c8:82:
62:c7:0d:5a:04:6e:75:a4:a5:75:af:96:d7:68:5d:f5:7b:35:
88:d1:96:f2:7e:8f:2d:01:df:77:fb:37:1e:63:5f:d2:c1:1e:
05:a7:16:16:36:d9:7f:f6:20:85:03:b5:34:b8:4c:73:50:7f:
46:8e:76:40:85:73:d0:09:10:fc:80:99:0f:f2:29:a0:cd:86:
db:70:a7:7b:68:2c:c1:87:e5:4b:c9:6f:61:96:c4:b4:2d:30:
a2:7c:9f:b0:cd:95:e8:53:49:57:00:dc:0c:d6:55:0d:ff:37:
d5:5b:1f:06:56:1a:2c:87:9d:f9:0a:6b:57:72:5f:db:c5:ff:
25:61:09:60:52:71:e7:0f:c9:9d:48:57:e8:37:ef:5e:c7:8b:
ee:bc:c4:7e:1d:1b:a7:ee:98:18:a2:20:20:a6:19:b2:58:b6:
d8:77:d4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:09 2025 by rpki-client