Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7559eac3-78e4-3845-9a98-3cfbc54710dc.roa
File: 7559eac3-78e4-3845-9a98-3cfbc54710dc.roa (raw, json)
Hash identifier: c6u6VlDkot0X9P0WOKjFLWh2CH4zscMilrGBtVpapDc=
Subject key identifier: 70:35:8E:C9:BE:63:A1:51:FB:7F:2F:C5:FA:5D:CF:36:37:3A:1C:AC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1C53D0C87DB20E22838B48
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7559eac3-78e4-3845-9a98-3cfbc54710dc.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.197.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1c:53:d0:c8:7d:b2:0e:22:83:8b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b2f63271-8973-491b-b265-2c2ef91bd902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:c5:9d:06:9e:a4:74:56:d2:d3:ca:51:bd:
c4:70:ba:f3:e0:01:bd:29:72:a8:eb:74:5c:e3:c2:
eb:05:fd:7b:d3:21:77:24:db:1a:72:62:fe:b9:6e:
a5:8b:40:3b:f8:1a:b9:fa:2e:1e:ef:7f:58:dc:f5:
71:84:8d:17:e9:ea:56:1f:5b:ab:41:11:84:7a:e1:
27:eb:f2:98:14:e5:6f:de:72:9f:a5:15:20:68:6b:
09:71:d8:fe:19:6e:51:0e:61:84:21:dd:65:70:d6:
80:f0:31:9e:10:98:e7:5a:2c:26:a1:eb:08:ab:90:
78:9f:3f:66:45:f2:9e:02:de:5c:a8:01:5e:c6:bf:
ac:5e:bb:ea:ee:49:52:3f:3d:63:06:93:0f:04:38:
03:20:11:7a:5f:b5:af:b7:00:77:12:4d:82:db:dd:
6d:4f:58:8b:36:1c:4d:51:8e:c7:b0:98:e3:e7:8d:
a6:88:da:8e:ab:74:18:91:03:91:49:e6:29:d1:4d:
f1:a4:bb:e7:17:66:f5:67:c2:81:66:71:7f:4d:ce:
05:99:6c:0f:82:93:74:e7:23:80:85:c3:ce:ee:1d:
82:51:b6:c8:f2:5c:61:88:34:21:0b:aa:95:52:52:
14:2f:bb:53:8c:f2:c9:09:1d:8a:2f:23:07:c5:02:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:35:8E:C9:BE:63:A1:51:FB:7F:2F:C5:FA:5D:CF:36:37:3A:1C:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7559eac3-78e4-3845-9a98-3cfbc54710dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.197.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:16:81:fb:78:22:47:12:55:63:36:f0:7c:85:59:d7:a8:8d:
34:f3:d4:5e:2a:0c:91:72:46:e0:ac:66:ac:a7:c8:b4:22:2c:
3c:25:c1:ab:ef:a8:c3:55:72:28:68:b5:89:e3:71:91:8f:e3:
14:45:db:bc:d0:3b:c2:8b:ee:96:4f:79:97:a2:27:38:dc:39:
1d:a2:66:fd:52:86:0e:e0:04:29:2d:ef:97:b6:e6:1c:38:5a:
e8:c4:b1:43:86:a6:c5:58:43:2a:4c:b9:1a:bb:fb:95:c3:c2:
3b:56:d4:60:e5:eb:ce:4c:e6:ca:13:d5:a5:0b:91:94:df:8f:
cf:af:40:d8:95:c5:69:99:0c:22:e0:5c:c7:eb:83:42:0d:9c:
22:6b:de:27:ef:26:e6:4d:86:a1:45:63:e9:b4:d8:ca:d4:5b:
ac:97:14:2a:d2:7b:f4:fd:d4:84:9c:78:af:c1:49:17:90:34:
c3:55:01:b8:1e:3c:a7:fc:11:72:aa:af:b8:7e:6c:03:27:f4:
99:af:a8:f0:81:60:8a:4c:bc:72:38:44:e9:ba:18:37:94:b0:
fc:4c:62:62:94:c2:c3:ca:a3:03:da:b6:74:63:16:f7:25:07:
82:17:b6:c8:bd:c1:60:8e:1e:87:26:21:8f:95:d1:aa:ad:e2:
77:f4:58:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKHFPQyH2yDiKDi0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YjJmNjMyNzEtODk3My00OTFiLWIyNjUtMmMyZWY5MWJkOTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/TFnQaepHRW0tPKUb3EcLrz4AG9KXKo63Rc
48LrBf170yF3JNsacmL+uW6li0A7+Bq5+i4e739Y3PVxhI0X6epWH1urQRGEeuEn
6/KYFOVv3nKfpRUgaGsJcdj+GW5RDmGEId1lcNaA8DGeEJjnWiwmoesIq5B4nz9m
RfKeAt5cqAFexr+sXrvq7klSPz1jBpMPBDgDIBF6X7WvtwB3Ek2C291tT1iLNhxN
UY7HsJjj542miNqOq3QYkQORSeYp0U3xpLvnF2b1Z8KBZnF/Tc4FmWwPgpN05yOA
hcPO7h2CUbbI8lxhiDQhC6qVUlIUL7tTjPLJCR2KLyMHxQITJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHA1jsm+Y6FR+38vxfpdzzY3OhysMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzU1OWVhYzMtNzhlNC0z
ODQ1LTlhOTgtM2NmYmM1NDcxMGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkWgft4IkcSVWM28HyFWdeojTTz1F4qDJFyRuCsZqynyLQiLDwlwavv
qMNVcihotYnjcZGP4xRF27zQO8KL7pZPeZeiJzjcOR2iZv1Shg7gBCkt75e25hw4
WujEsUOGpsVYQypMuRq7+5XDwjtW1GDl685M5soT1aULkZTfj8+vQNiVxWmZDCLg
XMfrg0INnCJr3ifvJuZNhqFFY+m02MrUW6yXFCrSe/T91ISceK/BSReQNMNVAbge
PKf8EXKqr7h+bAMn9JmvqPCBYIpMvHI4ROm6GDeUsPxMYmKUwsPKowPatnRjFvcl
B4IXtsi9wWCOHocmIY+V0aqt4nf0WEQ=
-----END CERTIFICATE-----
Generated at Sun May 11 18:42:11 2025 by rpki-client