Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a06d7757-c06e-3022-9c45-e31f7fb97cb1.roa
File: a06d7757-c06e-3022-9c45-e31f7fb97cb1.roa (raw, json)
Hash identifier: QhrLNQjUeYm/nifVz2C1RdjtbRjLHuY8wj2LjQX0FMM=
Subject key identifier: A2:4B:17:8C:1B:47:20:6B:E0:21:A8:4B:C2:CA:50:22:F6:1D:92:0E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A0407190EB1F69C41313C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a06d7757-c06e-3022-9c45-e31f7fb97cb1.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 104.154.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a0:40:71:90:eb:1f:69:c4:13:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=5333f575-8467-4b5e-8dcc-148f73266f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:16:e9:e4:ff:91:b0:d2:15:7a:52:3f:ae:
b9:a8:fe:a0:48:d8:2b:84:63:c7:85:88:5c:5a:8d:
82:56:d2:ed:a4:db:67:61:33:3a:fe:7f:0f:b9:e0:
bd:62:65:f8:61:e1:76:2f:c1:62:44:01:de:0b:12:
2f:16:5e:bd:90:dc:04:81:34:b1:58:f1:ed:e6:77:
ab:a8:58:f5:9d:b6:26:88:84:a4:85:6e:d3:cf:1b:
0e:80:74:3f:41:d1:42:9c:0f:15:96:3a:a7:bd:e9:
14:cc:50:58:ea:aa:44:4a:f0:cf:fc:b9:de:82:51:
6a:d9:e2:26:b4:64:28:5a:22:cb:34:de:a9:b6:a4:
b9:1f:eb:44:f1:b7:1a:a9:c2:78:32:e9:e8:39:d8:
66:e0:f1:bb:bf:9c:2d:6a:3a:f0:f8:06:d1:13:c5:
ca:63:ad:1d:45:29:2e:ca:7e:03:ca:86:f3:00:8d:
51:24:20:4c:65:68:f5:b5:b8:bc:f3:6b:c6:46:d0:
b4:64:dd:de:5c:03:f4:7c:86:aa:06:af:96:f6:27:
b3:0a:0b:5a:7c:2f:8b:b7:f4:3d:ba:f2:6b:10:2e:
e8:76:7e:93:e0:d0:73:a1:c6:96:d2:bd:f9:43:eb:
e6:f9:bc:47:d5:fc:69:bd:27:b8:9e:64:e1:90:21:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4B:17:8C:1B:47:20:6B:E0:21:A8:4B:C2:CA:50:22:F6:1D:92:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a06d7757-c06e-3022-9c45-e31f7fb97cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:a7:ac:00:5c:fb:ad:ce:71:ce:bb:2f:96:37:67:b7:66:9e:
44:fc:fe:6b:d5:96:ca:e8:82:75:b0:ef:d7:81:90:70:e3:b0:
6e:a5:97:61:c4:4a:45:a4:b1:1b:78:ff:0e:ee:d5:61:8d:5c:
c4:92:50:59:43:1b:6d:20:30:26:c4:88:c3:ab:da:d9:15:21:
fe:68:63:a8:c1:77:07:b0:ac:0a:62:6f:8b:ed:56:17:6d:df:
86:06:7b:03:e7:75:26:21:ce:5e:f7:53:60:5f:61:74:0d:f5:
96:24:26:79:c8:bb:da:ad:7a:c4:2c:80:46:dc:05:3a:9b:4d:
03:b8:3d:be:72:6e:d4:0b:95:b1:78:17:3c:59:60:44:6f:27:
7f:e9:03:a9:53:27:26:e1:b7:2f:df:ee:a3:4e:85:bf:af:29:
36:1a:de:13:0a:20:8d:cc:81:bd:a1:15:fe:94:4b:7a:20:f3:
7f:ee:12:0b:15:ae:98:ff:48:fc:c0:8b:20:29:db:9e:d8:bb:
82:ee:26:22:11:21:0a:7b:e1:01:79:18:2b:1a:d2:ee:a1:d6:
81:74:ca:11:20:9d:30:c8:ad:e5:9f:72:85:38:82:9e:42:17:
df:d8:95:e8:4e:16:69:08:df:6c:d2:bd:d2:67:ff:f4:97:a5:
3c:5c:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:45:31 2025 by rpki-client