Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f1d18ad-1f29-3213-8c66-69d2bc8c68ce.roa
File: 4f1d18ad-1f29-3213-8c66-69d2bc8c68ce.roa (raw, json)
Hash identifier: CWX6HJXS/HIvB0RkMs5MR8OYrC8O+hI7g5NcJ0i0wGg=
Subject key identifier: 8D:BD:44:60:1D:C2:89:9B:25:95:7D:1A:A9:ED:31:B1:6C:1E:B7:76
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A17410CABCF4D4852E86A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f1d18ad-1f29-3213-8c66-69d2bc8c68ce.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.196.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:41:0c:ab:cf:4d:48:52:e8:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=666b4ec2-4035-49f7-91be-a448fc81cbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:5f:7c:dc:2b:6f:af:c6:ae:78:a5:6c:64:
61:82:e2:cf:cf:d8:e9:a6:58:61:fc:46:6f:8a:34:
8d:55:8b:91:5b:72:6a:0f:d7:d5:20:d6:00:f7:2e:
70:dd:a3:ec:fd:44:8b:62:20:45:fd:24:39:e4:c2:
8b:1d:ab:75:41:ee:5e:fc:0c:40:0b:00:1f:e4:17:
7b:c4:63:f9:9d:cf:43:24:a2:be:1e:cc:4a:11:b4:
6d:b0:d9:3c:c9:cd:2c:43:fc:32:69:55:d0:06:fb:
82:e1:4d:c1:a9:aa:f0:3d:66:48:cd:e8:55:e5:fa:
a5:30:3d:99:0c:c0:1f:b0:db:72:f3:a5:2f:f0:e8:
fc:82:18:37:97:f9:69:ab:8e:d0:1f:94:bf:65:dc:
10:61:e0:e3:41:3e:67:f6:75:95:2d:b9:d8:31:11:
c4:d9:bb:b5:31:2b:4c:73:f1:c9:6c:9f:63:c4:a3:
bc:71:6f:a8:db:4a:28:95:86:93:ca:bc:39:ac:7e:
47:c0:4b:4d:11:01:71:1c:75:e3:79:21:82:88:2a:
45:06:3b:3f:84:51:47:ed:11:c2:f5:22:33:f1:51:
97:43:5a:08:0e:73:17:b0:a3:19:e9:a2:5e:44:85:
6b:4f:7d:a0:ed:7c:9a:99:db:18:07:51:35:06:ad:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:44:60:1D:C2:89:9B:25:95:7D:1A:A9:ED:31:B1:6C:1E:B7:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f1d18ad-1f29-3213-8c66-69d2bc8c68ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:5a:82:36:75:ea:d2:a2:2f:39:61:fe:ed:7f:f0:2f:e4:94:
99:15:49:ff:67:b7:b5:68:fe:15:cd:73:10:d4:c7:4d:91:c8:
06:4b:7e:25:83:e4:35:82:22:72:dd:fa:a8:f5:0f:0c:59:df:
9e:68:80:16:6b:a2:6c:89:3d:32:ba:49:4b:ff:07:ee:8a:50:
28:54:75:61:9b:c0:7c:20:50:e1:0a:29:a5:b3:94:d5:7c:9c:
cb:05:0e:ae:96:14:f1:fb:4b:2c:a4:34:0c:7a:bb:19:d3:85:
3c:f4:a5:a0:a9:af:cd:7b:60:55:fa:b8:ab:3d:d7:95:c0:f3:
66:24:0f:00:a2:36:4c:0f:63:29:18:b1:bd:b2:4d:e9:1e:c3:
be:00:43:9e:10:a9:5b:8a:64:e0:28:96:d7:7f:53:2c:35:a2:
a1:4b:5f:de:d2:ed:04:b2:4c:73:52:c7:c9:69:c3:99:ba:3a:
f0:47:8f:ab:c8:a1:90:df:4a:0c:51:d0:76:4a:df:5e:a6:7a:
d4:ba:cf:5d:b6:a2:bc:d4:75:15:c6:99:ef:3c:2c:c6:c9:98:
f6:c7:2e:c9:9b:41:8e:45:1c:cd:9f:65:26:21:f1:4e:f9:45:
a8:31:cb:7d:01:fd:41:f5:85:6a:fa:89:ce:37:a8:04:6c:3d:
43:b7:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:44:44 2025 by rpki-client