Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1f45321-6c17-3d80-8ebd-77d4d0aae434.roa
File: d1f45321-6c17-3d80-8ebd-77d4d0aae434.roa (raw, json)
Hash identifier: XFi2Oqrimdxb68YsFSoTz4Gqnh2hAhBU03JU/DVE8jQ=
Subject key identifier: FC:D5:B7:61:8A:18:39:17:72:54:B2:44:8C:A5:85:7F:4F:C2:18:20
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A3F47DE0D07F2D880E6980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1f45321-6c17-3d80-8ebd-77d4d0aae434.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.154.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:f4:7d:e0:d0:7f:2d:88:0e:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3d01cf5a-78f9-45c4-bd91-237a49b300bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6b:7e:f6:6f:9d:4e:42:c0:38:49:0c:cf:fc:
8c:b9:73:3d:93:97:bf:8b:60:7f:05:6c:66:db:03:
60:bc:f0:f7:19:59:81:e7:ad:20:43:38:4e:ee:0e:
bb:20:dd:51:62:21:a8:cc:d1:21:27:f9:cc:cf:da:
fc:8b:00:b6:be:b2:a4:60:d2:19:6d:7a:3c:9f:59:
2b:f7:68:b8:8e:1a:67:51:52:a1:4e:5b:2f:13:37:
b3:f3:ec:a8:74:a5:f4:79:00:3e:4b:4d:da:2c:a5:
26:b2:76:26:b3:17:99:af:54:0e:57:de:e8:60:d5:
52:7d:86:a6:e0:1c:fc:48:a3:ee:eb:ac:bc:3b:ff:
b0:69:bc:7d:42:ac:26:e8:90:80:45:ab:4a:17:66:
9d:06:f7:66:b7:94:86:58:3a:05:ff:42:77:ab:36:
34:23:9e:c3:36:29:1c:c4:0c:c7:ed:47:1e:12:bc:
46:27:bc:b1:ab:65:30:94:19:15:43:90:25:3b:27:
76:64:8a:62:e6:cb:3c:a0:88:33:e7:76:27:89:c3:
8b:e9:8b:ba:f3:ab:f3:93:fc:2d:7e:2a:ee:97:4c:
fc:6a:3f:36:fb:97:b1:11:59:22:74:0c:7a:ab:8f:
bb:2e:cf:55:37:d3:ea:6d:ee:70:dc:29:97:9b:96:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D5:B7:61:8A:18:39:17:72:54:B2:44:8C:A5:85:7F:4F:C2:18:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1f45321-6c17-3d80-8ebd-77d4d0aae434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:b4:e8:05:98:88:46:9f:17:4c:62:e4:37:b6:b6:f4:d5:5b:
ba:5f:b0:02:a7:88:7d:5e:42:07:9c:c6:a9:30:64:47:ef:ee:
43:0b:6f:98:57:07:c0:ee:57:51:04:8b:27:27:a1:1f:8d:12:
51:0f:41:60:1f:57:19:6d:2f:7d:c7:21:ca:79:c1:ff:a2:79:
57:ff:e5:35:80:67:ab:40:bf:25:4d:15:0a:a1:b0:bd:7c:ae:
b1:38:8e:3b:db:6d:11:e4:e0:87:1f:bc:c5:e9:19:67:2f:97:
a5:b1:d2:47:4d:54:c3:84:ea:fa:20:be:9b:68:5e:ef:4e:e3:
a3:9d:b3:31:be:e4:63:89:2c:b5:ef:10:31:00:3a:83:24:27:
62:be:56:a7:74:01:8a:4c:c9:12:ab:56:35:71:79:39:9f:d8:
eb:1a:50:40:c0:36:ae:91:c2:b1:ff:51:a9:1e:01:75:7c:62:
91:d2:98:e4:f8:0d:bc:08:04:2e:8a:3a:01:86:90:4e:5d:f0:
f7:45:59:79:46:1f:71:a5:0c:1f:c6:a3:a8:10:a0:ac:df:88:
5b:6f:ab:86:50:9c:43:20:2c:1d:91:24:2a:a2:3b:a2:e7:89:
4d:2d:0c:36:c6:bb:90:b8:ea:07:37:c7:ec:38:71:86:2f:08:
8a:59:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:20:04 2025 by rpki-client