Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8425a596-6652-3f94-8fe6-6e7523a931ad.roa
File: 8425a596-6652-3f94-8fe6-6e7523a931ad.roa (raw, json)
Hash identifier: cv/UJdk9P6whQJh/DC8/IVSUVtsX4B9usQBz8p8gfEk=
Subject key identifier: 04:59:EA:3A:BF:45:37:39:25:64:01:AD:19:92:DF:5F:38:71:C9:2F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FD6539FB02F1AA241AFE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8425a596-6652-3f94-8fe6-6e7523a931ad.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.199.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fd:65:39:fb:02:f1:aa:24:1a:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4e18c519-375f-414a-9841-129a2ed37e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:f8:84:1f:7f:e8:2d:b5:8f:f0:1c:35:4d:
ae:9f:9a:88:78:60:6c:fb:ca:aa:d1:56:71:62:85:
4b:53:88:f3:19:9c:c6:27:e3:97:e9:5f:4b:b7:30:
2d:6d:15:3a:af:ce:30:d0:f0:2e:8d:d2:57:4a:96:
4c:08:92:c6:3f:15:93:d6:5f:08:12:24:4e:22:e0:
61:ea:fd:51:6f:d8:2d:c0:cb:ea:a0:04:d2:6d:62:
ad:6e:b2:6e:67:6e:62:4a:0c:7f:b1:3a:1e:9f:82:
fb:56:60:ea:60:61:86:eb:e1:ae:f5:aa:d7:65:43:
e6:c2:ae:4a:90:d3:d3:f1:bd:77:fc:41:4c:eb:94:
3a:ea:55:8a:39:57:71:98:18:67:3f:3b:06:de:ef:
e2:80:4e:74:09:a3:da:bb:20:57:0c:c6:03:62:f7:
b5:3a:bb:ad:3b:52:ac:84:cd:64:d1:f2:1e:4b:42:
4d:40:7e:7d:7d:7f:85:88:b9:b8:8a:2b:f8:00:a8:
2e:af:41:95:f0:b2:c6:d6:31:39:5b:b3:53:c8:60:
5a:7c:96:60:61:a7:47:72:58:62:74:08:d0:c2:08:
9e:4e:2f:42:2e:54:a4:06:64:c8:01:bb:ba:7e:fe:
33:13:06:31:e2:1d:af:89:bd:9b:43:16:03:36:82:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:EA:3A:BF:45:37:39:25:64:01:AD:19:92:DF:5F:38:71:C9:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8425a596-6652-3f94-8fe6-6e7523a931ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:17:b1:51:08:da:30:1e:5d:1b:62:9c:6b:79:aa:04:80:c2:
f5:0b:38:1f:c2:27:75:03:b8:a7:09:d5:23:d6:75:0b:72:7f:
d1:55:a1:78:31:e1:e5:f0:ac:7b:23:57:6d:4b:b7:57:7e:90:
0c:ed:f6:43:fd:4e:d2:ac:9f:b1:5a:f9:f7:b5:ed:91:6a:fc:
ee:59:d2:cc:ed:56:6d:aa:42:bb:c5:8a:86:94:fc:59:b9:d7:
42:95:03:59:98:81:98:63:cc:58:a4:e7:30:f9:e7:49:b0:18:
14:2f:47:28:5a:92:6e:28:a7:37:a3:87:bb:c2:98:62:fc:19:
90:43:f1:33:82:a7:1e:01:a1:94:97:ed:70:62:55:9e:fc:8e:
4a:e5:6e:49:41:a6:40:02:53:62:cd:ba:a7:52:cd:81:8b:7c:
32:1b:7a:52:63:72:5c:e0:d8:2e:73:10:82:25:b5:16:3c:b2:
0b:c1:7e:d9:b9:24:00:80:0c:aa:89:90:a4:87:7c:84:ee:ed:
50:32:25:e1:9d:e7:f0:4c:b5:71:08:82:a2:c8:d8:8e:fa:c0:
c5:be:aa:41:ae:a7:5f:0c:e0:f5:f0:b3:27:3e:2c:d8:18:33:
db:ca:ec:29:be:de:16:2c:f7:fc:6e:f5:95:6f:cc:b8:9f:b1:
a2:ae:54:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:25:02 2025 by rpki-client