Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6b12c8bf-0de3-3f0a-a2b5-2a4a441d44f2.roa
File: 6b12c8bf-0de3-3f0a-a2b5-2a4a441d44f2.roa (raw, json)
Hash identifier: zQRRk+xa48a1WIqa7E+Og0kSDV3Ku0w63kSeySSdHXg=
Subject key identifier: A4:D1:88:03:96:95:9B:1C:40:A4:BB:FA:BE:B4:8E:AC:33:12:6A:D7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1E0F3163424D2656B2F7C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6b12c8bf-0de3-3f0a-a2b5-2a4a441d44f2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.155.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1e:0f:31:63:42:4d:26:56:b2:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cf1396a5-75d8-4c38-ab1e-daa96056a181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:e4:60:28:cc:57:cd:5e:02:a0:ca:61:8d:
85:87:e9:84:24:65:f5:7d:f3:af:ae:84:c5:ac:56:
d6:5e:4f:3a:5b:25:a7:05:77:13:9e:e9:65:97:1a:
87:b3:24:33:16:69:b9:81:99:7a:d9:91:d7:04:23:
9d:23:85:9c:a0:5e:d2:d9:46:2d:54:2b:5a:72:bc:
6e:c6:1a:c2:d1:5e:1a:8e:2c:c1:f4:d1:1b:e3:70:
31:49:37:69:67:84:59:c5:f7:87:1d:a6:cf:e9:35:
e0:c2:5f:81:5b:c6:f8:61:f8:e2:92:f1:65:44:91:
4b:f1:6a:11:95:bb:ba:d0:bf:2a:4a:ef:13:6f:15:
7c:a5:3e:5b:c8:4f:2f:77:fa:f8:64:82:de:a1:d7:
73:09:d6:cf:b1:55:0e:2e:9e:37:ff:a9:6b:10:cd:
37:c0:88:e9:1e:97:93:ec:1f:95:63:e6:bc:10:57:
d5:42:09:fb:0a:72:6b:57:31:11:48:ef:2d:21:04:
76:db:5f:7b:06:16:8d:9a:20:b1:3c:7a:8e:b4:4f:
59:ab:bd:46:8f:ba:11:97:da:4c:51:c2:93:7f:8d:
11:4c:b3:f2:81:a5:a4:62:9a:82:79:aa:23:f5:4a:
c3:8f:60:bf:37:42:a4:b1:50:99:4a:ac:51:f9:c4:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:88:03:96:95:9B:1C:40:A4:BB:FA:BE:B4:8E:AC:33:12:6A:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6b12c8bf-0de3-3f0a-a2b5-2a4a441d44f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.155.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:2a:79:f4:0f:2d:dd:e4:7c:8a:8a:f0:3b:e8:a8:9e:a1:93:
93:90:6a:81:00:cf:01:e0:90:79:47:6b:1c:9c:db:96:dc:42:
0e:25:2a:7d:bf:3b:b6:ba:ff:99:cf:cc:fc:00:01:d2:d1:93:
f2:6e:b3:fc:5d:8e:21:85:3a:39:24:d0:0b:46:0a:7f:39:eb:
96:50:80:8e:60:35:2d:b9:13:e8:87:ec:c8:e8:c5:56:52:93:
87:5d:7c:65:07:27:61:15:35:d6:ec:72:f9:c3:05:fe:ca:7f:
89:ce:d6:fc:fa:7b:e8:1a:92:5d:fe:69:de:47:6f:fe:87:5c:
df:04:01:95:73:72:c4:b2:d4:49:2d:92:45:4c:4d:66:0b:76:
b1:8c:77:15:64:c1:31:71:51:ac:07:b7:4f:72:e7:6d:ee:7b:
97:cd:07:7b:2d:d3:70:c4:e3:ac:7d:c2:83:e2:34:27:6a:33:
f8:3f:cb:13:6b:32:ea:4c:e0:8a:52:f3:74:e4:98:16:09:0f:
7b:f5:4b:fb:0d:4c:79:db:aa:fc:c9:85:eb:b6:8a:0e:08:af:
8a:96:5a:b6:7d:52:b6:be:9d:24:dd:90:a8:1b:16:38:bb:5a:
eb:4d:cd:78:67:b2:c6:e3:76:77:51:db:44:d6:f6:0f:a3:c3:
d0:59:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:45 2025 by rpki-client