Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9554b61-3def-30bd-861f-b4dbe23e126c.roa
File: d9554b61-3def-30bd-861f-b4dbe23e126c.roa (raw, json)
Hash identifier: uJB3i7n+a4tf9sxRg1rpzkxdJFR+Qbt20N4tQFLyxSE=
Subject key identifier: 8E:BE:64:61:FD:9C:9B:C3:46:58:33:4B:D1:B6:E5:0E:06:80:8B:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A28678D34026A842533E300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9554b61-3def-30bd-861f-b4dbe23e126c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.155.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:28:67:8d:34:02:6a:84:25:33:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3bac7339-85a0-49e1-9a98-225882c22de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:6e:0f:9c:6b:b9:3b:ec:e4:6c:8a:07:a3:
a8:a5:fc:07:44:48:a6:37:1c:de:d7:f6:a4:16:8e:
f9:8e:c3:90:d6:9b:82:b5:da:24:fa:2c:85:1a:f3:
9d:46:5b:b8:54:0c:30:1a:f0:9e:3f:0d:e8:77:38:
f9:4d:e8:49:47:95:07:04:52:c9:21:37:15:6b:92:
08:68:f5:0f:68:ab:f1:7c:ed:8e:0e:a9:db:63:51:
c0:27:a6:1b:29:f6:47:b8:54:a1:e7:78:c4:c1:80:
48:57:41:2e:36:c9:b8:ec:f6:43:8e:9b:43:39:d5:
c0:00:a1:16:13:2f:bc:e1:13:1d:b6:19:27:0c:d1:
10:61:a6:e0:45:94:63:4f:91:a2:aa:79:7e:74:60:
be:25:d8:11:c5:eb:31:79:ff:30:78:a1:f9:2a:cd:
16:e8:6d:f2:88:d2:5f:96:f9:1a:c8:93:25:16:e5:
35:07:cf:b0:ff:2d:a2:76:45:2a:7f:27:52:52:55:
6f:aa:98:c7:63:38:1f:3b:4f:d0:09:71:0b:3a:90:
35:27:68:3d:a3:94:98:71:57:89:97:01:0f:70:f9:
56:56:5f:b7:f7:41:8e:78:98:87:d0:91:8b:46:02:
74:8c:34:40:ee:26:57:21:88:7f:05:86:d2:f2:fe:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BE:64:61:FD:9C:9B:C3:46:58:33:4B:D1:B6:E5:0E:06:80:8B:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9554b61-3def-30bd-861f-b4dbe23e126c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.155.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:74:5d:3f:de:c7:8c:bd:d8:3a:1e:33:33:49:b7:82:39:b4:
b7:3e:a7:4d:99:29:f4:ff:0f:53:38:ea:c4:5e:a5:30:ed:c4:
a6:e7:3c:f8:39:8e:51:29:7b:b3:f3:c3:49:fd:af:77:ef:26:
ec:b5:59:a7:17:85:0c:f4:cf:28:bc:a3:2a:be:96:2f:77:d6:
8b:36:a5:39:fc:df:db:a7:98:97:2d:ed:73:33:b8:35:fb:d0:
3a:02:bb:70:06:3a:d7:4f:86:de:13:b6:df:3a:87:d4:a8:e8:
ab:ee:f6:08:2a:4b:f7:8d:28:df:a8:dd:33:99:79:b7:c9:ff:
92:15:e4:d3:52:38:72:82:56:c5:77:50:b4:e6:f1:06:45:1d:
11:2c:41:af:6b:95:d2:e4:65:52:ae:a4:74:24:3c:47:07:eb:
8c:8a:78:16:b6:ef:ff:07:0e:c3:ae:93:63:fe:49:aa:c7:39:
55:2f:89:04:7d:ac:c2:e6:6d:c3:7f:a4:06:7e:dc:d1:36:80:
35:9f:80:80:25:86:44:ea:23:d9:7b:17:27:bc:5d:30:5e:33:
70:8e:03:7f:e7:43:88:c1:6a:81:26:4f:69:47:0b:4d:8f:b0:
cc:34:11:be:da:a8:51:4e:23:0d:62:fe:62:ff:06:cf:b4:6b:
84:0b:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:46:54 2025 by rpki-client