Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c8c7069-be0d-3750-9c7f-713e26f158be.roa
File: 5c8c7069-be0d-3750-9c7f-713e26f158be.roa (raw, json)
Hash identifier: O2K2Y+HVLMeN6ZS4St0VFZ9xo+uW+rbuH2SkZga4UCI=
Subject key identifier: 3F:E5:7D:0B:66:03:45:B5:3F:BB:53:63:65:0F:E0:C2:35:08:B2:C9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A24CEAC1284796D91C77F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c8c7069-be0d-3750-9c7f-713e26f158be.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.197.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:ce:ac:12:84:79:6d:91:c7:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4c36dd75-bb0e-4b50-a145-9dd1fbbe9814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:73:38:da:62:0a:8c:09:5b:1f:f3:9a:65:
7e:dd:70:98:74:2c:59:34:3f:ae:ae:b7:d6:da:1d:
5c:4b:f3:21:a5:97:c3:e7:19:cf:0e:c3:cb:f9:6a:
4a:69:7e:19:0d:87:39:c7:e6:92:25:b0:df:23:2b:
af:4c:7e:fa:10:9e:61:60:30:38:fc:0c:d9:86:dd:
8a:83:16:bc:87:5b:2b:02:a1:97:f2:f7:4a:e0:8b:
02:f2:92:b3:6e:ff:cd:e4:8b:3b:83:42:2f:9d:4a:
41:aa:c6:33:ff:57:22:ab:d4:57:9c:a1:d7:7f:bd:
e3:e5:4b:de:22:4e:42:81:5d:e9:ac:b9:43:d1:11:
f8:fe:c9:6e:62:1d:80:cd:f1:f2:db:05:41:31:0c:
ac:5f:58:44:4f:81:2b:25:ba:71:d5:02:66:c3:81:
af:94:19:c1:26:e7:9f:8d:d0:43:7a:41:aa:ee:70:
96:71:55:0c:3f:22:97:97:1a:6b:aa:31:9c:49:cd:
c9:05:35:b0:53:63:5e:28:05:ba:7f:e3:01:f5:fe:
5b:c7:a7:c9:d0:41:b6:2f:2d:b1:44:a6:40:84:cd:
77:17:b5:85:5f:7a:3d:48:7f:a3:23:44:2d:56:54:
79:e4:53:44:4e:01:d2:46:98:a9:6f:e1:6c:58:ad:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E5:7D:0B:66:03:45:B5:3F:BB:53:63:65:0F:E0:C2:35:08:B2:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c8c7069-be0d-3750-9c7f-713e26f158be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.197.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:35:38:58:c1:50:d4:8d:5f:a6:fa:a8:21:44:b8:e2:9c:ae:
57:c1:ca:6e:1a:a9:48:d6:20:c4:b1:d2:df:96:d3:0d:50:58:
fb:5c:67:87:50:54:7f:30:0a:43:ff:68:e5:ff:d2:69:90:4b:
52:cd:eb:f3:b9:86:c2:7e:cd:2d:95:6c:6e:3f:3e:11:57:2b:
83:b9:5f:cc:1f:b4:1f:29:3c:93:ef:48:13:a4:b3:de:fb:85:
c7:2b:57:6d:d7:4c:66:c8:c0:8e:73:78:8b:38:8c:ad:2f:63:
c2:73:1e:23:53:22:9f:80:72:b6:39:62:53:80:63:57:e0:e1:
d7:a0:10:69:37:40:01:cc:a0:46:ee:06:2d:84:71:49:f9:7b:
11:fb:2c:73:41:11:21:2b:f9:84:8c:61:37:f8:c6:83:33:07:
38:a1:e7:e0:47:b6:29:25:c9:5e:a7:e2:53:f7:ba:9c:d2:54:
2d:fb:d5:79:5d:1f:ca:fd:40:09:4f:b8:09:0c:6b:36:da:d6:
f8:43:85:33:23:d7:0e:2b:86:47:02:52:de:39:3f:62:c6:f7:
a7:25:4f:2a:0f:b1:80:16:1c:e6:b6:ed:3e:3d:48:a5:f8:c1:
6f:b5:9d:47:48:67:62:e1:ed:a1:ea:9f:d6:96:03:5f:50:90:
ae:9e:a4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:23:02 2025 by rpki-client