Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5310b532-59b2-3a63-927d-5dcf7ccc2c07.roa
File: 5310b532-59b2-3a63-927d-5dcf7ccc2c07.roa (raw, json)
Hash identifier: OFSieFR8g5xJvrRM0pCKnxZq6Ka29bG2mh5fQEi58x4=
Subject key identifier: 39:FB:71:DA:35:9A:05:4D:08:87:A8:F5:A0:FB:01:D9:68:18:9B:62
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2507E4357F280FEB49E880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5310b532-59b2-3a63-927d-5dcf7ccc2c07.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.196.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:25:07:e4:35:7f:28:0f:eb:49:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=25b0f322-0026-44a1-a42a-c6e9d0401127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:ce:d4:9f:f0:f2:06:28:3e:c3:dc:9e:37:
57:bb:db:92:48:43:89:0a:98:bd:b0:f6:42:d3:ff:
25:e1:c6:70:cf:0d:c7:ed:42:76:54:b9:a7:6b:e8:
d0:2d:fe:de:fa:35:ff:0e:18:26:fc:26:00:b2:4d:
62:ba:2a:55:0d:76:6e:da:c8:d2:3b:d9:fa:93:36:
f6:a5:22:48:25:4f:06:9e:bd:dc:86:f7:7a:b6:3e:
0a:97:ee:85:78:9f:4e:c3:31:94:31:cd:c9:8c:f2:
37:26:1a:d1:ee:ba:4b:0a:37:2f:ec:0e:62:82:0d:
55:68:2b:31:8c:61:61:4f:d5:d8:1a:73:09:c8:6f:
45:df:52:e2:e5:5e:f6:64:5c:59:f2:ba:6a:9c:59:
d7:3c:da:ad:38:65:ff:75:c6:2d:65:c0:35:61:26:
bf:d9:d4:12:18:fb:1f:f2:02:65:e6:a0:dc:39:00:
92:18:20:4d:ed:01:90:c4:82:98:1e:59:e0:b4:7d:
14:fa:cd:6c:b0:cc:b7:c9:94:d8:1f:9b:62:0a:62:
3a:93:77:55:ba:cd:bf:f2:45:9e:ef:f9:b5:2e:41:
bb:f1:92:fc:ca:03:ea:37:a8:65:08:54:57:56:c9:
e3:0b:55:8b:8d:4c:97:84:83:73:2e:f7:5a:65:8e:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:71:DA:35:9A:05:4D:08:87:A8:F5:A0:FB:01:D9:68:18:9B:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5310b532-59b2-3a63-927d-5dcf7ccc2c07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:49:23:06:6e:64:e7:a2:e8:cb:a9:42:91:48:3d:9d:62:af:
83:b0:31:47:c6:8a:2c:9d:b7:d4:eb:c6:7c:ce:62:10:34:01:
b9:09:b2:08:49:02:e3:c4:d1:9e:68:af:42:7e:21:9c:f8:66:
e0:05:cf:08:6e:58:c4:0a:e9:f3:34:a4:6e:8a:d2:bd:96:19:
5f:f8:92:ed:80:7f:65:76:b9:1d:97:fd:72:9c:77:38:41:e8:
85:fc:26:00:18:9d:4f:d1:b4:e6:9f:ef:d1:18:c3:bb:ea:9b:
59:2f:93:19:d7:3b:e6:60:44:f3:75:29:6c:e3:19:50:0b:a9:
99:3d:fb:6b:a6:26:01:01:bb:26:07:88:ab:90:8f:18:7f:4e:
44:04:2a:6d:73:53:ee:1a:f6:6a:6c:71:d5:cd:fb:27:09:ca:
56:2e:bc:45:27:45:2e:db:14:02:a0:fc:99:e7:67:86:2d:28:
a2:71:af:cd:0b:a7:50:e5:b0:73:59:e8:23:48:1b:71:14:07:
e9:e5:d1:83:73:fa:be:4c:d2:51:5d:7e:f9:a5:b6:43:21:e4:
bd:29:de:b7:aa:b1:53:6c:80:d5:dc:7f:d4:48:47:72:47:60:
66:8a:cc:ad:74:7e:37:da:c9:e6:29:fe:51:9c:57:5f:d4:06:
a0:ed:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:32:26 2025 by rpki-client