Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32b16c70-9a3c-30fc-8df8-9ffd9ec7ff02.roa
File: 32b16c70-9a3c-30fc-8df8-9ffd9ec7ff02.roa (raw, json)
Hash identifier: pFZJwl4lnK7keGdwJyDKzmEgU4onnWliy7jzWvWsK/Q=
Subject key identifier: B6:8B:1C:22:9B:1C:F6:0F:F3:25:EE:A2:64:F2:49:58:C2:E0:7B:9A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0FF6823235A5E7B465A740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32b16c70-9a3c-30fc-8df8-9ffd9ec7ff02.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.196.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:f6:82:32:35:a5:e7:b4:65:a7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b355d24b-1de2-4cb4-8422-388461f40a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:98:03:49:07:79:76:66:0a:1d:a9:43:b0:
41:af:82:e4:6a:ea:83:dd:d6:35:62:cf:a9:d7:ae:
d0:19:0d:b1:12:ef:80:83:e3:66:13:e4:85:1c:2d:
f1:d1:c3:40:ae:ac:d1:ab:46:22:c8:e3:0f:af:fa:
a0:d4:9b:8e:9e:6e:cf:92:3a:45:08:d5:80:b2:20:
25:03:7d:6c:95:85:c3:fc:87:6e:45:d9:69:70:1d:
cd:f5:b7:ef:89:2d:db:6f:ad:aa:d5:8c:b6:e5:f8:
92:a7:0c:ac:c8:17:7b:90:53:44:34:51:42:e7:7e:
f8:23:fd:c2:67:2e:22:ba:6f:9d:f5:b6:7f:af:8a:
26:db:e9:b6:6a:2b:e1:1d:dd:93:fc:19:fd:af:6a:
15:b6:4d:b0:24:de:ed:36:00:9c:54:fb:34:6f:01:
c8:bf:4c:f9:a5:6e:23:5a:d3:7b:71:20:85:49:e5:
2b:0a:84:1d:f4:64:0a:9a:5b:b2:2f:ff:92:e1:bb:
24:ab:d6:45:1b:64:c6:be:5a:dc:6b:ed:f2:ea:49:
bc:17:e0:2e:1e:05:51:36:7a:a4:3b:42:4a:f1:c4:
62:97:00:c0:4c:fe:47:ac:f5:34:5a:ce:00:61:61:
16:ba:2c:48:7c:e5:ea:55:d7:aa:85:15:49:83:b1:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:1C:22:9B:1C:F6:0F:F3:25:EE:A2:64:F2:49:58:C2:E0:7B:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32b16c70-9a3c-30fc-8df8-9ffd9ec7ff02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:56:b4:c0:5e:0e:18:25:38:52:dc:df:4b:43:a5:df:ef:c6:
38:05:4e:0d:3e:49:7b:74:05:a8:55:e9:9a:d9:4e:88:c4:02:
cb:f2:18:c2:2c:7c:db:74:17:f6:24:bf:95:d2:b9:90:f8:6a:
bc:91:c3:67:04:bf:7e:3a:d7:b9:cc:15:70:0a:0f:6d:7b:18:
3e:81:ae:2e:fe:f7:d6:0d:8f:c1:2a:79:a8:80:e8:17:3e:de:
33:43:ed:a9:1d:43:8a:9a:de:39:66:da:87:ea:35:35:0f:d9:
aa:b8:7f:80:b2:c7:d6:eb:2f:11:84:73:d6:fc:ea:7e:70:0d:
8a:ad:34:5d:56:92:87:34:c1:62:dc:c2:8f:1e:a0:7f:6f:0c:
b5:5b:8f:8d:d8:b0:fc:0c:11:a2:d8:f1:77:0c:78:6e:43:24:
21:3c:17:b4:46:94:a2:97:ff:0d:76:e6:53:7c:b5:a5:6e:13:
6e:eb:a3:d2:ba:6e:cb:10:29:1b:fe:ee:9a:67:48:25:d8:e1:
b8:95:3b:52:e2:54:ee:44:7a:c6:3e:2a:4a:6f:70:7d:d0:e3:
82:42:a1:b3:82:07:83:8b:db:1b:2b:a2:ed:8b:ad:5d:27:75:
90:f6:21:da:d4:1c:e3:b0:27:e8:75:96:49:7f:b3:6c:09:78:
fb:7e:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:33 2025 by rpki-client