Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4b4ab4-aec2-3f4e-bc3e-10af1ad479de.roa
File: db4b4ab4-aec2-3f4e-bc3e-10af1ad479de.roa (raw, json)
Hash identifier: pn1570+fSu57SvFlHy3CMn/aeGDUuao15Kj4DWFeAxM=
Subject key identifier: 57:2D:14:E8:49:79:13:28:07:EA:78:CA:7B:00:D1:1B:88:25:46:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EE9F114E295F06F3005E90
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4b4ab4-aec2-3f4e-bc3e-10af1ad479de.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.196.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:9f:11:4e:29:5f:06:f3:00:5e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=47f3ffb9-65d0-4064-a418-24cb29157f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d9:f1:bb:8e:2e:60:35:ec:5e:ff:5d:6f:36:
0f:f4:8a:26:85:ee:9c:5e:c6:ed:b2:4e:27:f2:e2:
07:07:9e:e8:3e:b8:cb:88:9d:81:c3:c9:78:f4:c7:
ed:04:3d:9c:75:30:94:c4:b6:95:2f:e3:37:19:02:
a0:ef:3f:39:78:48:9d:01:78:b4:82:27:6a:d6:ed:
4b:12:cb:2b:aa:7b:8e:82:2c:a3:5d:a1:b5:e8:b6:
86:e1:c7:26:12:03:df:d8:c5:79:c6:df:d1:dd:1d:
9b:dd:a3:6e:2a:9d:d9:da:66:a7:90:ae:e8:81:be:
27:a5:4d:17:6b:47:4a:2e:b8:9f:a3:bc:41:54:11:
cc:8d:5c:5f:ce:32:41:8c:bb:de:6e:04:d3:a9:2c:
b1:29:ba:45:e5:e7:9f:58:07:f5:7e:74:19:2b:da:
53:b6:8e:82:a8:74:80:8e:e0:b7:b7:ff:51:72:5a:
16:ed:ea:97:40:de:da:ef:4c:94:ce:9e:b3:9f:06:
04:66:ad:a6:17:d9:d0:9a:24:7c:ad:1b:f6:a4:d5:
4d:8b:f4:51:8b:df:de:c5:3e:cc:00:61:2c:d0:41:
f8:f8:0e:c8:c3:7c:18:33:9c:43:dc:9b:29:6e:96:
df:d1:d6:57:da:65:26:bd:d9:97:ce:23:f2:c9:37:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2D:14:E8:49:79:13:28:07:EA:78:CA:7B:00:D1:1B:88:25:46:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4b4ab4-aec2-3f4e-bc3e-10af1ad479de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:57:a3:cf:a4:4d:3d:0d:26:54:6f:74:9c:15:38:00:16:ea:
f5:24:69:19:cc:44:23:0b:fd:a6:4b:42:d3:04:8e:45:bf:91:
34:c6:99:a6:e5:68:e9:3f:39:37:e8:13:f9:58:1b:d9:84:e6:
44:ad:88:e8:f6:84:32:47:af:97:12:0d:45:3e:14:00:88:81:
d3:21:bc:58:63:57:cf:31:dd:9c:2f:74:89:14:e0:da:39:c5:
51:dd:4d:9d:33:6d:90:85:9d:35:f4:5a:81:0c:86:9f:c0:21:
48:48:a7:43:65:b3:70:08:93:8b:18:16:c7:9a:72:fb:9a:d4:
a6:95:c8:d3:7d:d7:c0:eb:72:7e:b6:84:62:04:97:9c:d9:b3:
2a:f7:b5:fa:54:f6:4f:b3:be:23:c0:c2:b9:3a:0f:cb:74:ed:
f0:bf:03:f7:1a:d1:21:b6:21:0d:da:3f:6d:24:42:03:33:e3:
52:db:db:fb:28:57:3a:77:aa:af:b6:b4:9d:a1:a1:b6:e2:06:
6c:12:f5:8a:f2:82:4b:32:a1:1c:a8:72:ee:40:34:be:ea:9d:
8e:8b:04:2a:4b:18:a7:53:cf:31:26:0f:e4:6e:1b:51:e5:01:
8d:be:2a:3b:e5:ed:af:03:ab:34:f8:a0:40:79:36:59:cd:e1:
77:10:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:21:05 2025 by rpki-client