Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3da2bb7b-9cd0-3769-af7b-7e9ee9ccd635.roa
File: 3da2bb7b-9cd0-3769-af7b-7e9ee9ccd635.roa (raw, json)
Hash identifier: eMrZTxKBDuASPbSp93n8e7THL0YiHpGQPXXYuryyV5Q=
Subject key identifier: 84:CF:00:80:6D:03:4A:96:84:D9:8D:DD:27:CF:26:AC:16:9B:77:FD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A04C9AEACD96E3E04E00C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3da2bb7b-9cd0-3769-af7b-7e9ee9ccd635.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.197.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:c9:ae:ac:d9:6e:3e:04:e0:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cdb74e08-bb61-4fcf-8d34-a12eadeb6684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7b:e9:6b:85:30:fe:ba:99:f3:0d:fb:6c:1f:
32:86:6e:f8:fe:f9:ef:8c:b5:0e:e9:51:1b:81:62:
94:46:fd:dd:93:a8:7a:0a:1c:c9:9f:d5:78:4e:a4:
09:ad:ea:6a:d3:cd:8f:34:63:1f:43:a2:dd:8e:ae:
06:ea:d2:49:c8:cb:d0:a1:0f:0b:7e:25:a7:f8:28:
82:ba:3d:d0:eb:1f:a6:65:da:ea:61:76:68:a8:ef:
1f:6c:98:a7:31:54:d1:c6:32:a7:40:8a:d1:46:91:
5b:9c:2c:6a:24:2c:e7:82:14:f5:c4:6a:0d:af:ec:
83:11:2f:e4:eb:c0:0d:83:9f:de:76:17:a7:39:f5:
52:95:97:c8:f1:88:09:df:f4:92:56:67:69:aa:16:
be:bd:56:2a:7a:ce:60:db:d2:f0:4c:05:15:10:4a:
96:75:8f:dc:30:52:16:6c:15:fd:29:c2:fe:7c:df:
a5:a5:39:1d:3e:00:f5:34:45:9c:0f:e9:bb:21:de:
b3:0a:43:35:05:da:8b:ec:59:f2:00:ba:19:4b:ac:
0d:0c:45:be:97:25:e6:41:10:6d:cd:6d:b0:fa:a9:
11:55:0b:6d:84:00:5f:22:54:c2:4e:99:ed:75:1b:
6c:94:19:29:0b:10:fd:a1:68:e4:36:ce:8c:67:9a:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CF:00:80:6D:03:4A:96:84:D9:8D:DD:27:CF:26:AC:16:9B:77:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3da2bb7b-9cd0-3769-af7b-7e9ee9ccd635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.197.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:79:15:21:d2:56:fc:92:d2:b9:72:3c:b7:fc:6b:90:dd:49:
34:20:2a:47:c7:59:8d:0c:09:da:af:d8:81:fd:28:df:5d:7b:
a8:7f:d0:55:f8:34:e2:5c:4e:d0:ad:ea:8d:1c:b1:c7:aa:c7:
0e:50:37:da:77:cb:2f:e7:b6:6e:f5:4d:4b:c8:6e:72:2b:11:
50:1e:2f:7e:ce:55:f2:24:c8:01:e3:56:8a:b0:74:3f:7a:aa:
1c:fb:92:24:ec:ca:c7:89:e7:7c:50:82:4f:1b:b8:50:5c:59:
4b:69:3c:5b:52:75:01:e5:77:89:4c:8c:b9:ff:01:8a:b0:b0:
cb:a4:b7:3a:67:e5:39:cc:c6:5d:f3:1c:49:a1:1d:43:d7:6a:
21:16:07:28:74:15:07:f5:b4:3c:82:12:df:5e:14:5f:2f:cf:
16:7a:ea:b9:e3:21:91:09:38:97:07:91:ed:2c:78:53:14:7f:
00:66:3d:ab:ef:9a:a1:cc:ce:d1:ad:96:4c:52:c1:15:9e:44:
39:0e:b6:fb:b6:be:e6:11:a9:50:f2:f8:97:e7:3b:40:f9:ee:
da:68:9a:4d:f5:d0:99:96:3c:fd:aa:5c:8f:f2:a6:c9:fa:3a:
39:8d:21:7b:3c:35:d5:87:53:db:3c:0e:d5:42:36:e1:9d:58:
8c:3d:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:24:51 2025 by rpki-client