Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce990f78-1646-353c-8521-89b3c5114ca6.roa
File: ce990f78-1646-353c-8521-89b3c5114ca6.roa (raw, json)
Hash identifier: JyUJ1aqaOQsUsxIYbM0/hosY5MlqQsylqUID/wPeJII=
Subject key identifier: 9A:E0:1F:47:D4:90:31:D4:CF:C9:BD:CF:75:41:26:E1:78:8E:E3:18
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0CEBA3FF7864C4F64EDDC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce990f78-1646-353c-8521-89b3c5114ca6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.199.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:eb:a3:ff:78:64:c4:f6:4e:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8d2f34eb-1101-4da2-850a-5a10f670e384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:e8:28:27:13:86:aa:9c:b3:ba:5e:b2:99:
9f:ab:83:10:96:7e:60:8e:16:f5:33:0a:7e:da:8d:
6c:2e:1f:c5:dd:a6:0d:df:5a:6a:aa:6d:42:e0:81:
d0:81:95:60:95:0e:88:60:f1:23:28:33:ad:de:77:
82:9a:5c:ff:21:66:28:65:cf:1c:ac:c6:d4:7b:32:
a1:f6:79:17:a4:db:1d:ba:d6:d3:e5:73:86:bc:3d:
fe:4b:f3:2a:37:e5:5c:1b:72:1b:bf:17:22:48:1e:
ae:32:64:63:1d:a3:ac:a7:d0:dc:6a:fa:5d:da:a4:
31:03:5f:b1:09:28:8c:b5:9a:17:16:54:5f:b2:20:
47:bc:b3:40:e0:dd:7e:04:7c:08:83:74:2f:e7:88:
de:f9:5f:fc:b9:9e:1a:02:bc:ff:b8:c0:2d:48:e6:
89:28:48:1e:24:0e:1d:2b:88:6f:7d:b4:a3:fc:ee:
bb:36:a7:32:32:6a:50:53:84:06:c9:92:30:6a:13:
54:75:ce:6c:17:db:0e:64:51:72:7e:93:87:6e:11:
48:04:9f:be:db:46:1c:de:82:b1:17:87:a1:25:33:
13:94:9b:86:28:f5:80:67:c6:b2:18:c2:73:e4:b3:
23:90:99:f4:8e:dd:a7:6d:58:cc:50:03:04:54:f2:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:1F:47:D4:90:31:D4:CF:C9:BD:CF:75:41:26:E1:78:8E:E3:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce990f78-1646-353c-8521-89b3c5114ca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:d4:a0:bd:4b:34:63:73:25:fd:ad:86:96:1b:b7:00:a6:6a:
64:05:9e:62:c7:f4:86:f5:9c:d0:44:c0:fc:d0:f3:36:9f:0e:
82:89:a5:d0:dd:03:f1:b6:1b:f2:e5:8d:98:e8:1b:ae:07:01:
7f:21:c7:f0:c1:ed:36:67:2b:bf:fb:d5:6f:bd:bd:b1:83:a1:
a0:33:4d:83:64:4f:51:b2:2d:db:67:19:10:49:c9:c8:ae:27:
2f:27:b4:f3:91:af:77:5a:15:2e:cc:71:bf:56:94:09:7d:68:
f1:40:9b:b4:ef:5e:f8:9b:3b:a3:28:2a:50:3e:e3:5c:79:94:
42:b9:fc:c2:e5:e9:2c:e5:fd:f5:ba:78:00:e5:5c:d2:81:c0:
7e:a8:12:45:98:81:34:8b:ed:98:54:5c:27:32:c3:9d:e5:42:
a7:7d:43:66:db:0b:25:60:37:48:fb:5f:04:17:2f:9c:1b:05:
17:0d:48:8b:6f:18:52:e4:0b:32:9b:34:04:b7:22:91:49:06:
7b:18:05:be:27:ac:01:d2:4c:cb:64:3f:8f:82:df:c6:b2:54:
14:e7:3f:81:e7:39:a6:08:03:c4:d5:63:b8:8c:3e:4e:02:36:
9f:ea:9e:ae:72:3c:ef:69:05:83:7e:49:6b:4d:c8:66:0f:52:
82:b2:af:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:11:08 2025 by rpki-client