Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc69120-3fd6-3815-ac79-be021fcbf3ad.roa
File: cbc69120-3fd6-3815-ac79-be021fcbf3ad.roa (raw, json)
Hash identifier: saF9uXHbVX6d1bEj2KzfBhqfxdmxDqhmqzxlncQhiQs=
Subject key identifier: BA:EE:6E:46:F8:1E:07:28:F5:E9:9C:E4:F0:89:09:4E:E3:69:A5:2F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A21D6A088493A34ABABA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc69120-3fd6-3815-ac79-be021fcbf3ad.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 104.198.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a2:1d:6a:08:84:93:a3:4a:ba:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=cd9e765b-b1ed-45f2-8687-b0a03915307f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:ba:fc:9a:21:b9:32:1c:fd:4b:a8:38:63:
8d:cc:e8:de:36:f2:27:28:de:16:3e:c7:66:ab:d4:
a3:b8:f6:e5:df:61:0d:25:5d:ee:28:78:e8:76:04:
2f:be:06:b6:a9:70:6f:7c:a5:9b:01:41:7b:c9:8b:
89:32:d9:05:12:a6:39:da:01:e2:af:6d:af:da:10:
01:14:7a:9d:b8:4b:5d:56:39:9a:2e:c9:e6:32:ef:
b4:25:46:30:4a:11:24:d5:b1:86:34:51:07:c4:e9:
6f:69:11:50:03:5a:85:fd:41:48:0a:bf:fc:d5:c1:
50:3c:8c:c4:45:1b:8d:69:34:94:f1:3e:91:1a:02:
79:b2:3c:c2:6e:71:7a:f3:13:50:82:f9:5b:97:3a:
f0:10:da:50:1e:fa:5e:be:43:fb:7a:06:4a:63:16:
ab:c4:ce:04:8c:9e:00:d2:16:7c:b1:f5:e6:f9:2d:
e5:36:36:32:f2:fb:2c:ce:bf:19:3c:ef:4d:4f:27:
63:fc:a0:e5:1f:7f:29:ec:d1:b1:6e:30:5e:16:9b:
3c:65:fd:2d:4a:77:1c:26:e9:fa:c4:43:c7:af:a0:
60:c5:85:c4:ad:91:ec:3f:41:aa:17:c2:eb:da:45:
05:f9:0c:cc:87:f9:23:24:23:8e:0f:e6:eb:b3:ad:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:6E:46:F8:1E:07:28:F5:E9:9C:E4:F0:89:09:4E:E3:69:A5:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc69120-3fd6-3815-ac79-be021fcbf3ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.198.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:30:78:17:fb:c3:ef:d7:b7:7d:9e:4d:0a:f1:4a:7c:1e:35:
52:42:ae:5c:9b:35:27:32:f0:fd:93:8d:fc:f3:38:24:2c:65:
74:2e:ce:0d:bd:a6:62:ef:74:5c:ea:fa:b9:5f:75:d4:28:48:
50:16:eb:b0:1a:8f:40:22:3e:6a:8d:f0:28:b4:c4:19:a9:67:
36:62:b0:28:f2:2c:5f:00:82:ae:fd:94:f1:14:16:36:8f:80:
2e:0e:e1:ea:a6:f0:a5:ef:59:a6:08:59:3e:7b:4f:33:84:a7:
03:88:03:5d:04:99:43:4f:c8:12:4f:1b:37:12:21:d7:f4:5e:
bb:15:37:da:35:15:19:09:36:05:bd:25:1a:67:92:06:23:aa:
0b:f5:f7:03:d5:19:01:22:fb:15:6b:03:8a:d9:01:dc:6e:80:
81:db:75:90:0a:c7:ce:6a:6c:1a:d4:19:c3:63:30:ef:64:53:
c4:6c:89:47:ba:5e:1e:e6:fa:0e:b8:5f:ad:99:62:33:90:24:
bd:f4:48:e3:c2:c6:16:0a:d3:14:f4:a8:a1:33:c4:ff:36:8b:
1e:f2:9a:16:bc:d6:6e:90:f0:26:b0:cd:c7:b2:0d:d8:30:8f:
6b:b3:fd:6e:bc:05:a5:5c:01:48:8b:a2:96:75:ec:81:08:b8:
8e:89:b2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:55:01 2025 by rpki-client