Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/701a821d-eeb2-3122-bd43-e161033b0d9e.roa
File: 701a821d-eeb2-3122-bd43-e161033b0d9e.roa (raw, json)
Hash identifier: U7ycqY8Rt6t+cHpepA8wnBmJWtll2vCC2BjHXowKy00=
Subject key identifier: 19:63:84:A7:98:7C:30:42:58:61:24:AD:B8:79:3C:D1:72:7A:DE:5F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F9B5F30A69BA3AA5549A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/701a821d-eeb2-3122-bd43-e161033b0d9e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.155.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:b5:f3:0a:69:ba:3a:a5:54:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=88ce2ebf-99e3-470d-adb5-7e7abf848d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:fe:a9:d9:df:18:5d:c8:d2:ad:06:53:e4:
c6:74:8a:d7:8d:49:33:32:22:ae:bc:82:25:7c:a1:
c0:fc:6a:d2:b8:d7:38:3b:40:68:19:ad:d4:70:79:
7e:97:4d:4e:d2:30:fb:cd:ae:5a:69:ad:25:66:cb:
75:28:91:c0:3c:dd:78:09:16:6a:12:fd:d4:31:a0:
7e:6b:f5:94:1f:23:fe:ba:b4:b3:d4:c5:00:ce:c5:
2f:6e:d1:e7:5c:43:d3:b1:fc:b0:06:1b:75:66:12:
28:a2:e0:d5:4d:81:06:cd:cf:ea:2c:d1:28:77:01:
96:d1:48:0b:3b:04:de:97:e8:8c:a3:58:17:14:2a:
eb:59:0a:67:c6:55:f9:fc:4e:4b:b3:c3:5d:41:55:
70:de:cc:d7:89:76:97:bf:38:30:56:ee:aa:19:83:
88:20:2b:0a:06:b7:7c:17:79:00:e1:1d:0c:d5:82:
3f:0c:91:32:f3:df:28:26:d3:da:80:cc:02:4b:15:
8c:c7:c3:2d:a5:61:b1:65:cd:95:9e:b7:26:56:f4:
38:46:64:5e:29:ce:d4:76:3b:bf:7e:bd:e3:02:6c:
0a:29:e5:f3:25:6f:95:58:e3:d3:da:d0:28:78:40:
e8:fb:c4:d5:8f:83:c9:dd:16:e4:9a:5a:e0:66:aa:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:84:A7:98:7C:30:42:58:61:24:AD:B8:79:3C:D1:72:7A:DE:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/701a821d-eeb2-3122-bd43-e161033b0d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.155.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a8:0c:80:a5:25:cd:c8:22:46:cd:f2:87:72:28:67:02:6b:
c1:33:47:0c:49:e3:2f:b2:1a:dd:36:49:c2:9a:01:d6:7d:7a:
91:fe:33:d5:86:b5:b9:0d:25:97:03:a9:a1:82:a1:d0:42:57:
4f:d8:21:b6:88:5d:45:4b:6b:ab:8b:0d:a2:76:c6:89:1c:7d:
eb:bb:31:0a:3c:60:b1:f9:6e:5f:08:6d:61:b8:f9:1e:a6:9d:
59:ed:39:40:8c:1c:2c:5c:a2:28:72:54:76:81:7d:3a:fa:76:
92:d9:d4:b0:74:e2:13:90:8d:77:e6:33:a1:96:e0:9d:9d:a3:
d1:2c:5e:2f:6a:26:88:a7:b7:a6:82:09:fa:a0:08:c5:c1:72:
50:b2:da:35:0d:3e:89:49:72:e0:8c:a0:c0:33:1c:ba:61:66:
d9:4b:dd:52:de:7d:85:d9:ae:bc:9b:fc:2e:6e:b9:fe:11:78:
3e:f5:ab:2e:0a:a3:f6:44:f7:40:32:0c:a2:97:2f:04:25:84:
d3:51:0c:1b:e1:20:1c:c7:7c:03:ef:c4:1f:67:cd:5f:c7:d4:
6b:6a:6b:71:e5:70:b4:3d:b0:6d:d6:75:6b:e5:a6:26:4f:5e:
02:68:10:71:75:f4:23:29:91:f8:ca:37:fc:a8:92:f2:54:e5:
48:ce:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:14:21 2025 by rpki-client