Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55f34cc0-18b0-3028-8daa-72972e387b1a.roa
File: 55f34cc0-18b0-3028-8daa-72972e387b1a.roa (raw, json)
Hash identifier: Nrz2XdY4SgjuIEVAloBihgpMl/xsvsKsepuWTxoTw7I=
Subject key identifier: EB:0C:B3:59:CD:B5:0C:23:44:B2:C7:A4:B3:81:B5:35:65:08:D6:F6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BF1A79AB9019698503ED40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55f34cc0-18b0-3028-8daa-72972e387b1a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 104.154.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bf:1a:79:ab:90:19:69:85:03:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f566d91f-5989-4cdd-bb8e-7e560362c6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3d:12:9d:74:1c:b5:f5:9a:2d:eb:01:58:68:
ce:1d:1f:7e:77:94:a2:e4:fb:e7:02:a3:74:4f:d5:
98:e8:c9:0b:c7:60:6d:10:00:e2:73:3a:98:dc:d3:
5a:fe:07:98:32:72:99:7a:38:f2:d0:e3:b7:2c:94:
e2:f1:ba:88:ee:15:77:cf:3b:9c:b6:8a:f1:57:c9:
a6:eb:4d:73:18:14:36:7d:13:f8:e3:9b:3c:66:2e:
63:d8:76:e0:0b:56:7a:64:4c:40:b5:ae:c8:9c:e4:
3e:26:6f:73:ca:c2:d1:37:45:0b:bb:df:05:fb:f2:
a0:e6:7f:5d:b6:6e:85:b5:66:46:c1:24:bd:b5:a9:
df:2a:c6:73:92:f1:e0:96:6c:86:ab:16:29:81:d6:
55:e7:51:da:fc:b7:99:71:e2:02:a9:ca:14:a3:10:
27:9c:fe:01:f8:39:7d:2e:57:84:0c:ff:bc:7d:eb:
b5:b0:07:b9:98:4e:5f:7d:4c:22:18:8b:6d:09:b5:
ff:9d:6d:86:dd:99:b3:a7:74:bd:e1:0c:14:74:3e:
0d:2b:10:b2:d2:9e:91:07:6a:fa:b3:02:98:9a:09:
fc:4d:7a:b9:06:f0:07:aa:8a:08:cf:ad:e7:db:ae:
37:54:00:3a:62:c6:d5:90:ce:d4:8a:a1:85:72:bf:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0C:B3:59:CD:B5:0C:23:44:B2:C7:A4:B3:81:B5:35:65:08:D6:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55f34cc0-18b0-3028-8daa-72972e387b1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:43:a6:9e:f6:d4:9c:75:89:97:8c:be:20:70:e6:ae:92:62:
5e:47:60:65:07:d1:e8:fd:cf:20:3a:f5:fe:c0:8e:d0:2f:60:
61:2a:86:26:39:9a:ba:f2:f1:55:34:57:93:b5:94:54:13:ed:
59:2f:f0:47:d6:4e:4a:ef:dc:56:ad:34:34:d2:07:53:02:91:
ac:23:ca:0a:6b:46:75:9e:ff:70:7c:e1:ec:e5:b1:cb:5c:a3:
cc:4d:fa:e3:b8:13:3a:47:90:87:e4:c5:b2:d1:5a:91:9a:84:
ac:d1:dc:fc:36:0f:2f:bf:58:82:06:78:01:df:4f:55:29:ff:
0b:b8:50:46:03:db:0c:34:d3:9e:a5:0c:dd:44:8f:99:35:cd:
82:4f:21:73:a5:e9:c2:fa:a7:54:53:c9:d5:e4:b9:b7:3f:66:
75:f0:c7:bc:ac:c5:c2:f2:37:71:ea:3c:8f:7a:15:15:6b:f4:
ee:cc:cd:e0:3f:9b:df:f4:59:9e:20:68:c9:e7:e6:bb:c6:31:
f3:58:3e:ee:ad:b8:36:c7:02:84:c6:14:1e:ec:f6:72:b0:ff:
e6:09:e2:a0:35:1a:c0:e5:09:5a:65:f3:df:54:15:83:71:e9:
09:44:81:26:59:c7:9c:56:0f:c7:9c:d9:b3:08:33:08:39:52:
f7:41:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:40:42 2025 by rpki-client