Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bfc1909-6189-38c8-a2c7-2bbfc52051c2.roa
File: 3bfc1909-6189-38c8-a2c7-2bbfc52051c2.roa (raw, json)
Hash identifier: OKETPb9UogDcFUiRoajLBt5wPP8bCYm8qBrNnh1K13w=
Subject key identifier: 98:40:ED:0B:57:3B:12:11:9E:82:83:00:A3:72:A5:EF:C0:36:90:84
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FBD775BA2CCE4BD1B4C680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bfc1909-6189-38c8-a2c7-2bbfc52051c2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.198.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:d7:75:ba:2c:ce:4b:d1:b4:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2225e3cb-b99a-41cc-a534-a5ffb1cfe5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:53:31:cf:40:ca:e5:35:49:00:78:3f:e1:
2b:a1:a1:c6:e1:ed:e1:6c:db:d5:18:1d:86:1e:3e:
cc:b1:30:0b:dd:d7:c0:03:3b:5e:43:dc:00:db:ad:
4b:94:53:3e:0f:8c:79:43:04:28:57:11:43:37:8c:
bf:c6:93:2e:25:7d:8b:43:60:8a:cb:07:b6:e6:fd:
fe:30:d2:1e:39:b7:4e:18:d0:06:20:e8:1d:44:83:
ea:39:35:c7:b4:78:77:7a:43:54:b0:7f:ac:92:0a:
52:ba:38:15:09:a5:c3:23:71:e9:c6:b3:2d:1d:5c:
f3:d7:f7:60:6c:76:d7:a9:4d:cb:2b:36:cc:e2:d5:
34:9a:2e:0e:03:fa:76:bf:fa:07:7f:41:84:55:92:
a5:d1:7d:0f:99:79:a9:ee:ec:9e:62:d0:2d:34:9e:
fb:e1:98:be:a8:40:1a:a2:44:3a:1e:fe:6a:5b:68:
e7:25:3d:89:f8:29:cb:de:4e:02:e2:77:9e:e0:55:
9d:86:d0:38:1a:87:67:9f:4f:0c:f9:ef:08:b4:51:
03:51:37:46:7f:0b:c5:3c:7e:16:fc:b7:9b:c7:76:
b6:bb:7e:72:4f:d3:8b:91:e8:29:04:3f:4b:57:91:
ae:5b:2d:3e:64:99:4e:c2:1a:e9:74:a2:ab:7a:f2:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:40:ED:0B:57:3B:12:11:9E:82:83:00:A3:72:A5:EF:C0:36:90:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bfc1909-6189-38c8-a2c7-2bbfc52051c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.198.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:cb:7f:6e:7c:d9:89:a0:91:05:8f:3b:49:9e:f6:33:7a:a9:
6e:62:c2:7c:c4:f6:27:36:de:79:e1:a0:5a:1d:4b:59:92:5e:
38:f9:19:f6:cb:00:d3:9e:34:eb:8f:0c:54:3c:6f:24:f1:b2:
d2:b9:63:c8:c9:62:3d:f3:00:90:f4:0e:15:28:f1:69:c2:bb:
63:31:e8:9d:21:7b:52:4e:8b:b4:89:26:9f:cb:d7:ee:63:4c:
4c:94:74:00:4c:b0:64:8f:ec:be:6c:0e:8b:70:bd:be:6b:cd:
71:15:a7:1d:53:4c:5a:18:97:fa:99:e9:08:81:52:ff:a0:49:
ac:2b:46:33:52:8a:d1:55:c9:2c:5a:19:a0:8c:c5:5c:7d:61:
af:87:1a:21:67:4b:46:cc:24:1c:87:d5:29:53:cc:8f:e5:e8:
d2:8e:80:13:2b:e7:09:65:ba:40:36:10:5e:ad:21:8b:db:04:
ce:89:d8:e3:2b:a3:2e:33:16:d6:42:4e:11:76:68:c3:be:d0:
92:b9:91:67:f3:d3:01:5b:57:17:d6:07:93:08:26:20:11:ef:
27:c8:d2:21:ba:48:26:38:26:1f:e9:52:17:98:1e:93:2a:69:
74:a9:7e:10:ac:af:25:9a:2e:86:f1:0b:0a:15:a2:2b:70:02:
01:9b:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:54:57 2025 by rpki-client