Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b53296d6-bc55-33b7-bf60-3add97e37e7d.roa
File: b53296d6-bc55-33b7-bf60-3add97e37e7d.roa (raw, json)
Hash identifier: rBA3FFnJMLGnvl+lLm3Dv/SIHwHZbqbzVblvtB3ao/k=
Subject key identifier: 52:56:4F:DA:31:02:6E:2D:D9:2E:A8:E7:18:41:82:16:78:8E:55:E6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2606793181F0EE7B14D580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b53296d6-bc55-33b7-bf60-3add97e37e7d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.198.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:06:79:31:81:f0:ee:7b:14:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=00fcc3e1-0486-45c2-b5bf-81ecfab547d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:45:60:8f:48:ea:2a:3a:0b:27:60:53:44:
49:ea:34:a5:a9:77:4e:7f:d3:7a:6b:32:79:74:3c:
2d:f6:37:6b:56:11:6b:02:c3:05:3f:09:8a:cd:7b:
c3:66:90:60:b4:68:c2:da:f1:9d:55:f7:47:ec:d0:
81:67:70:b4:13:97:6f:8d:06:26:ec:29:79:b7:0b:
97:2a:d4:52:13:97:86:42:b3:2b:51:ff:de:92:fd:
13:d4:ea:20:a7:40:18:60:71:14:ac:5c:35:f0:1e:
fe:c5:a3:2d:fd:bd:c1:22:b4:6c:51:f0:4f:99:4a:
1a:62:10:33:82:7c:07:00:3c:cd:52:bd:fc:55:d7:
ff:e9:2e:2b:8a:fa:23:e2:d3:8d:13:26:cc:ac:c0:
6c:ad:c5:0d:8a:28:b9:ed:89:7c:13:da:a5:d7:d1:
d4:d7:af:67:29:8f:45:7b:de:95:fe:cc:6b:07:84:
36:29:7a:a0:8a:f8:88:1b:07:8d:39:4d:1c:e0:e8:
28:84:e1:45:48:97:4d:62:e6:85:6e:00:5e:48:17:
c2:50:52:66:1c:bc:5e:48:cd:ca:44:a1:19:fe:92:
5c:5a:65:26:4e:75:77:56:74:3b:19:37:0f:bf:e5:
4f:5a:a5:48:60:6b:ae:c6:a6:08:be:23:c6:2b:fa:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:4F:DA:31:02:6E:2D:D9:2E:A8:E7:18:41:82:16:78:8E:55:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b53296d6-bc55-33b7-bf60-3add97e37e7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.198.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:25:9c:ef:35:29:da:7e:90:86:49:6c:60:61:bf:21:48:c5:
68:af:10:58:57:a3:b4:7d:23:0f:5f:18:16:60:2a:18:50:4e:
fc:d6:16:05:08:d1:d3:69:f7:79:5a:5f:2e:7d:82:4d:78:5e:
91:d1:31:c8:46:52:67:bf:45:e0:e9:66:e6:b8:2b:a5:e9:c7:
5a:f1:3f:05:0f:4a:5f:41:e0:f3:b4:1c:fe:f1:c5:40:8e:0c:
99:75:e3:b6:30:32:d0:74:02:14:a0:ff:3b:ff:d6:30:2d:95:
7c:92:ef:e6:82:58:da:e6:52:b0:19:a8:90:1a:72:81:6c:d4:
17:48:d0:ac:49:a0:bb:c0:65:a5:02:34:79:85:17:0d:28:dd:
be:d6:a1:3e:e2:92:e2:2d:4d:81:21:2c:70:37:0e:60:60:47:
c7:6f:dd:77:c3:4d:6a:55:d5:2d:4d:d3:f8:f4:93:ba:12:86:
0c:33:3d:df:84:cf:9f:fb:ab:d0:cc:2e:f1:24:85:79:94:d8:
6a:01:cf:82:9c:16:b5:df:72:f0:27:ac:ca:f7:41:97:65:a4:
a8:c8:da:c8:f1:7e:d3:b1:f4:bc:1a:0e:aa:05:02:c9:11:bf:
f6:26:80:4f:2d:6f:19:59:eb:a6:e8:81:b7:b3:b1:c3:8a:d4:
a2:6a:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:47 2025 by rpki-client