Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df7b03d2-7dde-32fc-8bdb-d138eff6ab6a.roa
File: df7b03d2-7dde-32fc-8bdb-d138eff6ab6a.roa (raw, json)
Hash identifier: AgzWaJI4tfqR8EKcBM3zjnIHLaPIT0zZiTEvbw8IT6Y=
Subject key identifier: 95:0A:52:69:DE:78:96:82:07:06:EC:B5:2C:5E:4F:A0:B9:93:87:AE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1A4C8922885DE521370240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df7b03d2-7dde-32fc-8bdb-d138eff6ab6a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.196.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1a:4c:89:22:88:5d:e5:21:37:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=300cdff7-6e27-465a-ad51-c3dc0add4e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:bb:fc:40:4e:74:3a:d0:ed:16:6e:ae:00:
d1:23:f9:0a:b5:12:3e:c8:46:4d:11:52:fc:df:0e:
5d:68:45:e7:ca:71:85:55:16:f9:eb:ca:4b:55:79:
bb:e0:25:f8:cf:81:3f:00:74:c5:04:da:21:85:30:
86:98:87:3b:41:4f:69:a3:5d:fc:ff:46:be:89:f4:
73:64:60:f5:8c:9d:af:e0:27:fa:b7:ac:60:92:9e:
71:62:65:47:10:b0:fb:43:a9:ea:d3:b5:f0:0d:1c:
2c:8a:6f:45:b7:d8:ab:fa:39:ae:c0:09:23:00:39:
51:b6:cd:ac:ab:4c:e5:53:ce:18:06:d0:54:d1:51:
49:02:cd:37:e1:0d:77:07:93:eb:cd:b7:2d:65:b1:
11:a7:bb:1c:37:3a:12:b4:4d:aa:2b:56:3c:a7:22:
05:b2:ee:ba:e3:14:3c:8e:9a:88:a2:c0:92:6b:7e:
fd:da:a5:2f:2e:38:bc:86:17:53:cf:0c:7f:6b:b0:
cb:22:2a:0c:57:37:fc:c1:97:01:94:92:0d:8d:7d:
5f:a5:85:b9:3f:a8:23:89:83:0c:dd:f3:8c:33:91:
37:b1:d0:5d:09:09:e4:27:1f:06:94:d2:61:51:f3:
5e:02:72:b6:73:00:63:a3:f3:6d:4a:dc:16:5d:cb:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:52:69:DE:78:96:82:07:06:EC:B5:2C:5E:4F:A0:B9:93:87:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df7b03d2-7dde-32fc-8bdb-d138eff6ab6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:87:56:fc:78:53:9a:9c:c5:a5:3b:a2:03:f3:0e:5b:17:3c:
b8:70:5c:dd:86:4d:0f:d6:5d:4d:fd:f1:f0:fd:55:d6:5c:0c:
0a:3a:ed:c5:59:ec:0e:70:02:5f:1d:c6:12:b6:54:4d:90:fa:
2f:b5:d1:ad:62:17:e3:30:0b:ef:bd:91:d9:4e:83:3a:4d:2e:
16:bc:15:43:16:80:86:05:4c:a7:fc:19:87:d5:2c:e6:8c:97:
52:f8:e7:60:9f:d9:0e:0f:16:29:b8:94:c4:5e:31:3d:0a:b5:
b7:3e:2b:01:25:4c:dc:71:64:d8:d9:29:a4:ec:c0:40:78:1c:
ef:b5:ec:3a:07:02:f2:93:f8:e4:9f:6c:66:33:7f:b2:da:49:
d7:e5:2a:69:a8:75:55:b7:e7:95:ef:96:63:80:44:61:14:13:
d7:a6:00:66:50:77:7d:51:00:a2:a8:b6:9a:7a:04:6b:f7:12:
29:86:f0:f3:30:29:8e:fa:64:12:fe:f3:88:79:50:6e:74:d2:
05:5b:a3:d2:d7:8a:cf:0e:c8:93:a9:85:a9:64:74:e2:97:e9:
d7:d3:cc:92:cc:85:ee:59:2c:c6:cf:02:1d:fa:bd:98:97:b7:
0a:e0:69:0c:98:5e:71:08:a6:b1:bd:08:be:b9:25:69:f1:5b:
2c:4e:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:11:55 2025 by rpki-client