Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d13cdc78-d4d1-3979-9e63-fcf97b9d1e38.roa
File: d13cdc78-d4d1-3979-9e63-fcf97b9d1e38.roa (raw, json)
Hash identifier: c4BH+skZ3dLw+UlarXa46/ckY+lDRHF0fw21XrnBB+A=
Subject key identifier: 91:53:32:E1:FE:B1:53:6F:96:A2:E5:D0:BA:9E:20:EC:0A:95:DB:E5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FEA7D7A561BB3A8D8EF280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d13cdc78-d4d1-3979-9e63-fcf97b9d1e38.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.199.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fe:a7:d7:a5:61:bb:3a:8d:8e:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3da7d9f0-af97-4ff6-a119-43acadd1eda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:d8:24:35:9f:ba:18:ff:98:e3:cb:6c:83:
8a:fd:61:f9:b6:36:f0:a7:41:fc:ed:98:33:2d:a9:
96:36:5c:2c:fa:59:f8:65:64:92:62:b9:af:38:d9:
f0:52:f1:18:ab:42:7e:cf:25:4b:fe:1b:6e:d5:1b:
28:51:02:d4:4b:5b:d3:b1:c5:e4:4b:d7:b6:1c:40:
44:2b:f9:a2:8e:ce:72:79:72:8a:fb:f3:46:33:9c:
1b:c6:b2:53:27:c6:2c:e5:bd:aa:f9:ac:43:bb:13:
79:0f:4e:8f:61:78:08:9c:a0:54:c7:b9:31:16:e1:
03:27:70:13:7a:22:7c:f6:94:e1:6b:37:44:22:82:
fd:0f:e8:bd:c9:2f:6d:2c:9d:5a:5a:f2:67:a5:ca:
46:e1:bd:27:f8:ce:81:f5:83:46:25:27:82:a9:8b:
c1:19:fe:08:30:c2:db:b8:d9:a5:7c:fb:98:84:0c:
aa:03:69:59:9c:29:24:8c:2f:1b:c4:87:58:95:9a:
36:6e:09:29:55:30:35:e3:db:90:c1:8e:46:0b:c9:
cf:3b:47:cd:61:2e:41:dd:1f:00:f7:aa:ce:7c:30:
45:91:68:b2:6c:ec:b8:36:5a:a0:25:53:c8:31:8e:
0c:85:38:05:65:05:90:37:83:5f:68:7f:f2:68:18:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:32:E1:FE:B1:53:6F:96:A2:E5:D0:BA:9E:20:EC:0A:95:DB:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d13cdc78-d4d1-3979-9e63-fcf97b9d1e38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e5:73:27:c7:be:fa:c8:10:c1:63:d7:8d:2b:fb:17:a4:db:
bf:70:34:60:7c:15:10:b1:d5:17:2b:7e:9c:4e:8d:99:34:3c:
4a:88:89:38:3c:c9:45:7e:0b:34:39:5b:bb:12:9f:c3:78:a3:
49:91:cf:2f:fe:2c:4c:76:86:41:2d:f5:d9:a8:60:fc:88:ec:
43:23:ca:83:0e:73:c0:56:d2:a6:40:3b:02:d2:ec:4f:56:ab:
88:db:8b:e1:ae:9d:88:10:02:78:4c:7a:9c:0c:4c:9a:41:41:
12:5a:b7:33:11:56:ae:4f:af:3d:11:5f:f4:7b:f1:fa:22:cb:
5e:7a:35:bd:17:d3:a2:77:61:0b:22:c2:eb:fc:af:24:6d:fe:
bb:49:d4:ea:ec:72:22:df:31:dc:07:83:e0:27:a7:46:3e:8e:
d4:a0:a7:48:60:ed:71:c8:ce:14:72:70:4a:40:93:e6:92:d4:
74:9e:3f:9b:53:33:06:9c:52:ba:f9:0a:6a:13:2b:70:50:55:
ea:2b:26:9b:10:3f:e3:12:b5:13:c3:8b:45:66:1d:b9:1f:80:
fd:f2:36:c3:9c:61:25:c6:4b:12:27:6b:16:fc:a6:f9:68:f7:
e4:81:45:a5:c7:37:a5:e4:a6:53:87:bf:85:f6:90:c8:5c:ec:
84:22:20:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/qfXpWG7Oo2O8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
M2RhN2Q5ZjAtYWY5Ny00ZmY2LWExMTktNDNhY2FkZDFlZGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc/YJDWfuhj/mOPLbIOK/WH5tjbwp0H87Zgz
LamWNlws+ln4ZWSSYrmvONnwUvEYq0J+zyVL/htu1RsoUQLUS1vTscXkS9e2HEBE
K/mijs5yeXKK+/NGM5wbxrJTJ8Ys5b2q+axDuxN5D06PYXgInKBUx7kxFuEDJ3AT
eiJ89pThazdEIoL9D+i9yS9tLJ1aWvJnpcpG4b0n+M6B9YNGJSeCqYvBGf4IMMLb
uNmlfPuYhAyqA2lZnCkkjC8bxIdYlZo2bgkpVTA149uQwY5GC8nPO0fNYS5B3R8A
96rOfDBFkWiybOy4NlqgJVPIMY4MhTgFZQWQN4NfaH/yaBgW+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFTMuH+sVNvlqLl0LqeIOwKldvlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEzY2RjNzgtZDRkMS0z
OTc5LTllNjMtZmNmOTdiOWQxZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHlcyfHvvrIEMFj140r+xek279wNGB8FRCx1RcrfpxOjZk0PEqIiTg8
yUV+CzQ5W7sSn8N4o0mRzy/+LEx2hkEt9dmoYPyI7EMjyoMOc8BW0qZAOwLS7E9W
q4jbi+GunYgQAnhMepwMTJpBQRJatzMRVq5Prz0RX/R78foiy156Nb0X06J3YQsi
wuv8ryRt/rtJ1OrsciLfMdwHg+Anp0Y+jtSgp0hg7XHIzhRycEpAk+aS1HSeP5tT
MwacUrr5CmoTK3BQVeorJpsQP+MStRPDi0VmHbkfgP3yNsOcYSXGSxInaxb8pvlo
9+SBRaXHN6XkplOHv4X2kMhc7IQiILM=
-----END CERTIFICATE-----
Generated at Sat May 10 14:54:50 2025 by rpki-client