Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5da3eb13-e984-3666-bc3b-502a1cb1913e.roa
File: 5da3eb13-e984-3666-bc3b-502a1cb1913e.roa (raw, json)
Hash identifier: KHhoWGIjy30s6iI16lXu3zrVu+uZwMyTwS2mQen+YIU=
Subject key identifier: 9F:82:7D:B2:F6:25:E2:68:09:28:7D:E5:81:42:96:7C:07:99:08:6E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C54CDF6D17097AB54C5C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5da3eb13-e984-3666-bc3b-502a1cb1913e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 104.196.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c5:4c:df:6d:17:09:7a:b5:4c:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a896e752-d89d-45e2-8aee-93dab85233cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:1e:1c:1c:3d:2d:01:4a:df:16:9d:b7:29:
1f:df:b5:25:96:35:2f:8e:2c:74:89:70:ba:0f:11:
76:af:e1:35:9e:d8:10:cb:e4:91:ea:c9:69:24:99:
84:1c:52:f8:d4:62:ce:54:8f:3d:9a:0b:7f:c2:64:
7d:3b:40:31:72:bd:ab:30:84:a3:77:9f:59:d8:ca:
48:82:52:62:e3:42:85:4f:18:4d:42:12:15:de:0c:
83:6d:61:a4:31:28:15:86:4e:51:c4:7a:81:0d:2a:
36:91:24:99:a3:1c:de:c2:1e:68:79:cc:35:2c:08:
bb:d5:84:94:0c:d3:bc:4b:4b:5d:f6:51:e1:45:6c:
09:02:58:14:da:54:87:17:75:18:de:f9:15:5c:8f:
67:48:49:c1:4d:55:9e:ed:db:f5:39:6a:bf:b9:11:
7a:d7:7c:d2:e3:7b:c6:21:60:70:a1:88:2c:d7:54:
1a:c5:64:04:04:5e:04:7b:4f:14:3f:93:82:27:d4:
97:fe:ca:36:66:e0:1e:11:4e:b3:c1:24:4f:31:22:
cd:81:37:47:e7:d2:74:aa:e5:39:d5:54:38:0e:78:
3c:bf:b0:58:4e:7e:37:5a:13:60:e7:f4:2f:46:4d:
96:72:a1:44:de:18:19:8f:f0:f2:0d:fe:4a:37:05:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:82:7D:B2:F6:25:E2:68:09:28:7D:E5:81:42:96:7C:07:99:08:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5da3eb13-e984-3666-bc3b-502a1cb1913e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:28:7b:c5:bd:7f:df:6e:50:f2:ca:bc:2a:52:fa:a0:ae:24:
50:75:24:49:44:8d:cb:b1:21:aa:3c:23:15:39:e8:8d:f0:64:
ac:1d:d3:58:9a:2a:5f:9c:b2:6f:37:d9:1a:f1:1f:05:22:2d:
50:7a:28:cf:9b:98:d8:73:78:14:ab:d7:a4:a1:92:17:57:01:
7c:ff:a4:b0:05:f1:41:32:94:b2:da:21:1d:71:e5:37:7a:0b:
9f:63:87:69:98:79:e7:4e:c7:d5:dc:de:39:0f:1b:4a:8d:c0:
a3:c7:d1:41:83:32:2b:49:e3:48:02:ff:47:56:0f:5e:7f:09:
89:43:61:66:90:8e:4c:40:f7:96:93:25:69:9d:10:5f:c8:80:
26:01:a8:0f:4d:e5:85:6d:d4:3a:a8:3b:a5:95:56:21:7b:3f:
9a:ef:8b:f2:29:d1:e8:cc:66:c7:a7:96:a6:d3:a9:21:7b:25:
e8:78:b7:c7:51:c6:23:ec:88:46:db:57:08:a7:6d:4d:a3:25:
47:aa:9f:56:a6:44:61:4f:c2:c2:66:a5:b8:0a:34:95:62:33:
c2:60:fc:94:2e:5b:a8:62:dc:dd:2a:a1:52:f2:4b:b9:46:b0:
f0:ec:81:70:81:ea:ed:16:3b:a9:70:58:d4:9b:95:cf:86:33:
06:44:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:35:52 2025 by rpki-client