Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33be5669-54c6-3fa1-915f-ccebda8afe8e.roa
File: 33be5669-54c6-3fa1-915f-ccebda8afe8e.roa (raw, json)
Hash identifier: PjLkzFqTnsbqWiCk3z/5SPLgzhmP4oPdmWq3zDyHQxI=
Subject key identifier: D7:4A:B2:19:5A:A9:53:B6:9E:38:C1:9D:D3:C6:98:AF:F2:54:97:FF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EEC74A909687F90FCE0380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33be5669-54c6-3fa1-915f-ccebda8afe8e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.196.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:c7:4a:90:96:87:f9:0f:ce:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8d310282-27d0-43f4-a08e-597f680d3f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:e4:a6:de:4a:26:d8:b0:e2:5c:6d:56:6a:
12:20:bd:3c:4a:76:f4:5b:36:9d:98:02:5e:b6:ec:
fa:37:08:8e:e8:04:f3:72:04:ed:a6:15:59:df:b1:
61:34:75:8e:59:7d:1c:c4:d4:1f:c7:e3:9c:ba:dc:
82:84:9a:80:b5:ff:fc:4a:0f:26:56:92:e4:4a:fe:
c4:4e:8f:ae:68:84:d6:93:65:37:e8:9b:f2:8c:fe:
56:a9:29:01:ac:8c:e0:f9:4e:67:06:b5:d6:d8:40:
84:e8:66:b0:bb:1b:7c:00:20:79:d9:62:8d:85:0f:
74:ff:86:3f:d0:14:d0:ff:52:3a:6e:6f:90:e0:81:
da:13:b6:97:4f:8a:96:2b:6c:c2:1a:86:95:00:cf:
83:1d:7b:9c:c4:31:b5:56:df:85:24:ca:71:84:35:
64:f5:7b:94:a9:4c:26:65:37:da:fd:89:63:e0:e2:
4c:bd:df:e6:2a:7d:e7:74:1c:06:d9:50:ee:96:40:
b1:cb:9b:50:e7:e9:60:2a:0f:c8:3a:ed:6c:bf:23:
1a:b4:b5:24:6c:3f:5a:1a:b9:0e:01:f3:75:cb:06:
57:9e:c5:23:0f:41:d3:5c:7d:99:3d:30:ae:23:53:
5f:de:40:0d:4c:c1:ae:17:08:77:50:7c:45:10:20:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4A:B2:19:5A:A9:53:B6:9E:38:C1:9D:D3:C6:98:AF:F2:54:97:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33be5669-54c6-3fa1-915f-ccebda8afe8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:54:06:92:2f:74:db:8d:79:8e:70:6c:b2:48:d5:2a:de:a3:
74:8d:f6:06:d5:36:c5:fd:0b:c2:e8:0c:85:85:ab:21:f5:bc:
5e:1c:66:a9:6d:80:65:fa:4b:f2:85:23:75:92:12:c5:26:96:
bd:15:3d:23:2c:10:3c:ca:9e:79:7f:5e:28:a7:b9:17:55:0e:
3d:2f:aa:31:76:e3:06:18:d5:76:c2:eb:02:c8:e6:e3:d2:36:
e3:17:7a:91:18:a2:e8:14:7d:d7:4d:05:ab:cd:d7:a9:ef:6e:
dc:6b:7d:d6:e9:c0:a2:8a:43:4a:e7:7c:2a:b2:ce:06:cf:e5:
fa:05:8f:a7:51:20:33:cf:9e:c8:8a:ce:0e:63:43:02:df:2e:
a2:f8:85:87:29:30:b1:1e:62:82:72:9a:4a:12:18:31:2f:f7:
4b:14:a5:e1:f4:dd:2e:72:0c:34:84:17:f9:9d:94:0c:cc:72:
7c:5d:95:59:a3:cc:55:fd:36:ae:24:fa:73:db:a2:79:d9:96:
76:ac:a2:45:b3:18:9d:46:55:a6:9d:a1:a7:43:39:23:1c:4f:
50:67:4b:17:d2:57:ce:24:02:53:c6:79:59:84:01:94:c8:d0:
3e:18:65:92:7c:31:ce:96:6a:13:d0:2e:c8:89:e3:19:e1:fe:
de:7a:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:09:51 2025 by rpki-client