Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f8f457a-1013-3f95-b315-97112fb252eb.roa
File: 8f8f457a-1013-3f95-b315-97112fb252eb.roa (raw, json)
Hash identifier: /N5EUltHJjoUWm+Nd+iLtc1uiJWafxUb7fv+WUIIP3Q=
Subject key identifier: 52:00:8C:85:7D:BE:D6:FF:8D:3E:BF:F9:98:3F:C8:C6:33:C3:5B:96
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1384288EBAE0E48334E1C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f8f457a-1013-3f95-b315-97112fb252eb.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.198.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:84:28:8e:ba:e0:e4:83:34:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=aa1f0004-f851-433c-b2c2-47d61bd55439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:ab:ae:37:84:48:d1:a8:aa:73:fd:6c:f0:
79:db:3c:af:1c:6b:32:30:e1:9d:19:46:2c:a1:fb:
90:f4:94:16:bc:55:c4:77:e6:37:88:58:bb:4d:a7:
4f:98:ac:8f:71:09:36:6d:b8:5e:4b:17:83:1d:a2:
88:8f:5e:6a:8e:c9:2b:6a:f7:ff:60:f9:7e:60:d5:
bb:51:06:e9:28:dc:a3:75:79:96:ff:d8:b9:d4:cc:
3c:e8:52:94:0a:e8:63:e8:f9:d2:4d:d8:dc:96:af:
64:fc:4a:a2:dd:f0:55:72:19:53:69:c7:36:8f:a2:
a3:eb:03:e1:8f:f3:46:82:13:5d:48:9c:1a:51:be:
c1:59:71:05:87:02:2d:60:f3:61:47:69:f8:6b:a7:
33:91:65:45:d6:83:1e:18:79:b1:50:15:59:7c:cf:
68:c6:23:fc:1b:87:7c:4d:26:65:56:40:c8:88:cd:
f9:23:f1:91:9d:09:5c:d3:2e:5d:a6:80:aa:5e:6b:
a5:7b:a2:52:87:fc:65:2e:77:c7:bc:8d:14:fb:44:
53:fc:5a:6e:65:dc:c0:e5:55:0e:15:b9:dc:97:a3:
6c:a4:b9:2c:92:e5:03:be:63:e1:91:6b:fc:fa:ac:
de:ba:e6:89:d3:d8:80:f1:16:e6:a7:9c:46:e0:68:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:00:8C:85:7D:BE:D6:FF:8D:3E:BF:F9:98:3F:C8:C6:33:C3:5B:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f8f457a-1013-3f95-b315-97112fb252eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.198.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b7:eb:c1:a7:90:b3:29:9d:13:45:0f:73:84:fe:af:b1:d5:
78:d4:0a:92:97:a2:be:60:5e:3f:dd:00:6e:72:66:f3:a0:ad:
a6:ee:c2:37:50:5f:9d:f3:b9:36:a8:71:ca:d2:70:b3:7c:a3:
b7:c7:2b:a1:2e:0e:95:ef:01:13:0e:a0:df:77:ad:3b:8f:43:
bd:51:e0:de:9e:42:02:96:2f:4b:80:7e:53:26:30:3c:48:b5:
f6:4a:ec:9b:78:75:46:25:ac:cd:cc:76:fc:94:18:5f:52:4e:
d9:7e:ef:f0:58:60:c6:dd:b0:3a:f5:64:d5:e3:27:64:3f:1f:
37:00:c4:7c:3f:aa:3b:e4:c1:75:82:68:46:59:48:ca:9f:ed:
73:cf:3e:50:96:6d:63:f8:8b:ec:a6:1f:ad:2e:09:23:0c:7d:
41:91:33:55:37:93:00:75:f7:a1:40:be:36:aa:83:e1:66:e3:
e4:6f:7b:bd:91:0f:49:16:c7:b4:d6:f2:fc:e0:90:09:48:d4:
5c:74:c7:b1:76:64:96:d8:25:e7:e4:6a:69:26:10:52:19:cd:
3a:00:30:01:d9:84:24:75:20:21:86:c0:96:ee:88:af:dd:bf:
4c:f1:6a:aa:0f:bc:de:6b:e4:27:c8:73:c7:84:d7:ed:cc:11:
96:cc:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:55:28 2025 by rpki-client