Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cff9ad5e-b97a-3d8b-8b06-2db797920b0e.roa
File: cff9ad5e-b97a-3d8b-8b06-2db797920b0e.roa (raw, json)
Hash identifier: 8fztBjPtd33scmcONdGqJZuU+gwt/42sFeiP1TKITuM=
Subject key identifier: CA:3B:39:C3:AC:41:B2:4C:73:5B:77:D1:AF:54:DD:D2:BB:3E:8E:56
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1DBC85324D23D6353B66F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cff9ad5e-b97a-3d8b-8b06-2db797920b0e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.154.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:bc:85:32:4d:23:d6:35:3b:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=37278375-d4b2-41d5-a49d-1227eb17dbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:50:e0:39:aa:13:8e:d1:09:55:4d:68:b4:
d3:4f:a4:d7:b5:b5:50:0d:8d:4e:79:ad:98:5b:da:
ff:36:b2:f5:d1:7c:2d:38:f6:27:1e:64:bc:ef:44:
70:f8:63:0a:0f:93:36:36:19:f3:35:5e:de:aa:52:
5b:d5:a8:d7:51:6b:0a:16:5f:8f:50:a2:f9:c1:c8:
98:ae:9e:88:aa:fe:25:51:ec:84:a7:eb:3d:58:4c:
6d:a6:81:f3:4e:d5:cd:ed:ce:ae:c0:f7:e6:a3:ed:
4d:6a:40:3d:6a:8a:e5:40:20:39:e4:61:b0:3a:91:
76:78:8b:97:38:c8:d9:ae:5b:6c:31:e1:21:a8:6d:
11:d7:76:8d:ac:14:94:de:e0:bf:6a:d4:7d:85:28:
82:35:a4:02:3f:de:6d:a8:30:5d:77:2b:14:65:25:
b7:17:8e:1f:3a:df:53:fd:5b:66:4f:06:b4:78:8b:
af:f5:ec:89:c5:5a:14:6d:ee:d7:6e:a7:14:89:88:
a2:43:f9:48:a9:be:70:4f:00:c6:65:fd:48:67:b4:
ac:65:c1:48:23:88:36:70:84:43:58:fd:08:e5:d9:
04:0d:dd:01:d5:95:2f:02:49:43:54:fa:6f:c1:82:
6e:19:75:8c:74:3a:12:00:64:ee:02:38:8f:f4:bd:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:39:C3:AC:41:B2:4C:73:5B:77:D1:AF:54:DD:D2:BB:3E:8E:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cff9ad5e-b97a-3d8b-8b06-2db797920b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:b4:6a:e1:70:ec:58:91:88:76:a4:20:40:12:d2:ea:92:81:
6f:9b:00:2e:cb:12:d5:67:d3:10:e2:2c:ca:02:e0:4d:b8:ee:
60:62:58:c4:6d:cc:ec:8d:51:97:51:ac:bf:b5:11:7f:46:f5:
33:39:b7:84:95:86:f5:73:a8:9c:e5:07:eb:a1:a5:6e:3d:0b:
f7:90:a9:29:de:db:77:e9:0c:39:31:ad:05:77:1f:f9:1f:7a:
e6:6d:cb:f6:dd:88:14:fa:9f:bb:d5:04:f7:b8:b5:48:e2:e2:
03:34:ba:9e:75:5a:b0:d0:2d:85:bf:f9:d9:d5:dc:15:58:20:
e6:d3:21:9c:f1:ae:74:2f:1c:5e:ad:ef:fb:a5:fe:a9:76:79:
c9:48:1e:0c:57:9a:8c:7c:ec:d4:73:30:0c:ee:54:90:f2:24:
b9:34:da:de:34:2c:1b:67:d4:b7:e9:db:a0:41:89:09:2c:20:
e6:54:ee:c8:ee:01:b8:bd:18:50:9e:b9:24:0b:b2:5f:6e:f0:
b6:dc:1b:aa:74:75:51:00:1b:e7:8d:99:c1:6c:86:79:1c:b3:
70:97:ac:76:3c:0d:86:a5:c8:40:43:d8:5e:96:88:15:dc:62:
0a:0b:43:56:38:3e:1d:e2:e8:c6:57:c9:78:2c:ef:b9:48:b7:
9e:a6:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:23:48 2025 by rpki-client