Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33e4576b-ec5e-31c7-a373-b7e67055736a.roa
File: 33e4576b-ec5e-31c7-a373-b7e67055736a.roa (raw, json)
Hash identifier: H/KTh2Tao1DYI3OseVJ4NH44fFvQBOZB4BV8cPK+rLY=
Subject key identifier: FE:FD:BE:B0:AE:04:32:BE:F1:A3:28:E6:EB:E4:8E:7B:CC:3B:97:75
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A42DCCC2D319F917F38F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33e4576b-ec5e-31c7-a373-b7e67055736a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.154.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a4:2d:cc:c2:d3:19:f9:17:f3:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3e197734-f86d-432c-b4fe-be5dea10bc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:93:55:60:0f:e3:e7:47:6d:50:cc:df:99:
12:dc:3d:b9:9d:0b:b7:53:ae:e6:83:17:a8:83:a4:
60:b3:d9:41:13:11:32:a7:41:a9:49:90:02:89:80:
4f:56:e2:7f:46:bc:4a:b7:4f:a8:ea:72:d5:35:99:
25:6d:4f:b9:77:cd:0f:e4:ec:21:c1:2d:14:a1:62:
e5:95:af:25:04:54:18:fc:18:fb:61:f0:be:5e:16:
93:fc:98:ad:7f:a9:ee:3c:6e:d7:e5:34:32:ea:8b:
63:1f:3b:1c:50:ba:3a:51:6e:a7:53:28:db:41:59:
cb:22:a9:79:2b:2a:cc:4c:99:12:15:f6:0e:0c:74:
96:26:b6:70:ad:67:72:81:d3:5f:3e:58:2a:88:85:
90:27:dc:68:9e:2c:93:ab:da:54:a8:82:de:b1:69:
a4:b8:d8:b8:1b:6b:15:2a:4d:a7:b0:4c:0b:62:56:
ef:7b:c4:21:58:1a:a3:bf:c2:23:bd:71:2e:e5:4a:
9f:45:6e:2a:97:98:4c:73:9d:ac:0c:bf:d7:f6:f9:
99:e9:18:5c:76:c4:e2:c0:9d:45:cf:a2:91:d4:c6:
3d:7a:e3:12:ab:10:5a:1e:3d:2f:eb:df:f8:94:c9:
df:d1:12:b5:cd:65:53:6e:fd:73:fc:af:11:5f:5f:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:BE:B0:AE:04:32:BE:F1:A3:28:E6:EB:E4:8E:7B:CC:3B:97:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33e4576b-ec5e-31c7-a373-b7e67055736a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:69:35:0e:9c:d8:77:2c:08:6d:82:3f:39:c3:42:03:ef:84:
24:bd:7a:d4:76:a1:66:12:2a:19:47:5e:04:08:6c:e3:5a:43:
c2:b9:95:fe:48:6e:3b:78:30:a6:b9:a2:7f:2c:16:c4:1f:f9:
da:a4:11:8b:9d:91:96:b0:8e:0f:92:60:32:9a:92:9d:86:3b:
03:28:e2:14:fb:fc:7e:d9:67:9f:c4:91:26:8b:63:c0:02:34:
e3:e8:f9:9b:2d:bd:fd:df:10:e4:c7:f7:96:5d:80:78:5c:fa:
71:9b:f1:3d:7b:97:24:5d:ab:4d:bc:86:17:c1:f7:da:6a:98:
ec:0b:50:02:62:f1:d3:b1:41:0e:cc:75:c3:f3:d3:bd:c8:33:
9f:91:ee:a6:c6:28:bc:14:4e:fc:82:3d:ac:44:21:0d:ca:e9:
3a:41:15:20:17:71:76:ad:8e:6f:df:4c:2d:21:7f:21:a2:17:
3b:42:b4:b2:cd:97:b3:1e:5b:c9:7b:ab:bc:fc:bb:c3:4f:ab:
79:d3:11:b3:14:03:12:70:59:c7:b7:02:90:76:09:45:99:b0:
5f:01:35:b8:68:ea:6f:8a:3f:ed:81:23:1f:dc:f2:52:b1:c5:
06:14:46:56:f7:10:01:ad:31:ff:50:38:73:fd:1c:ca:8e:ae:
9e:7a:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:35 2025 by rpki-client