Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f257eea3-dc9e-39b3-8fe7-11cb90535e9b.roa
File: f257eea3-dc9e-39b3-8fe7-11cb90535e9b.roa (raw, json)
Hash identifier: zJIn5mjsTu9BmSjmNaVV63dHdo+tXYFBE76PHqU0jts=
Subject key identifier: B7:03:D3:34:53:A4:09:C8:33:70:72:35:1C:50:87:97:B3:A5:00:63
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A050E48107718730145B680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f257eea3-dc9e-39b3-8fe7-11cb90535e9b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.196.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:0e:48:10:77:18:73:01:45:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f13533c4-92ad-449d-8b45-86f12baf8d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:8c:fe:2f:fa:37:c4:dd:71:1a:08:2b:47:
70:07:18:b8:25:5f:cd:a0:70:97:65:91:5c:90:0d:
f9:ab:be:d0:9e:b5:29:3a:c0:cb:fa:95:0e:a7:5d:
71:83:a2:d7:50:e3:1a:3d:7d:7e:2b:bb:4c:b2:78:
be:21:53:3f:8b:3b:09:f5:e7:04:59:9f:11:25:92:
eb:0f:6e:30:7b:a4:79:80:f8:41:13:a8:c0:8c:f4:
bb:b1:d5:40:71:5b:f6:d9:bb:55:80:79:c9:c2:4c:
6c:cc:78:d5:9c:d6:53:2a:4d:60:7f:e4:7e:f9:e1:
90:11:13:f7:23:c9:18:85:a7:b5:72:68:67:99:1e:
e7:dc:9a:02:3c:e9:53:c4:5b:23:fa:1e:ee:52:53:
78:a2:51:05:43:60:a3:ad:2c:e7:8d:9f:fe:8b:1c:
6f:13:97:fc:72:89:d2:0b:59:0f:36:7b:e6:9b:63:
22:47:6b:75:f6:3f:7e:a1:4c:f1:5d:39:fd:47:72:
83:3f:27:62:aa:94:eb:2d:18:b5:c0:de:5b:52:6b:
c6:0c:13:74:34:16:81:47:a9:62:5c:66:a9:5a:27:
b7:88:b5:d7:30:41:2e:36:2b:a5:90:9f:b9:fb:04:
f4:c3:d5:80:21:07:96:8f:bb:20:19:a1:18:23:85:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:03:D3:34:53:A4:09:C8:33:70:72:35:1C:50:87:97:B3:A5:00:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f257eea3-dc9e-39b3-8fe7-11cb90535e9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.75.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:55:b4:ba:58:f2:b7:c6:c7:57:cf:e3:f3:0b:56:b8:a3:76:
e8:e5:f8:c3:58:10:1a:6e:d0:fb:4c:a1:4a:a4:dc:61:0e:db:
91:b0:7e:32:ff:a0:5d:f4:a1:f4:f5:7b:a5:40:50:cb:20:cd:
52:b0:d8:6c:28:a7:8a:95:fa:17:cd:35:cf:4c:8f:c8:52:ec:
0f:c3:2b:2e:ba:08:23:75:03:15:75:e8:ba:95:c9:0c:5b:fc:
df:5b:76:49:71:2d:c3:5e:a4:7d:bf:dd:78:ec:f8:e7:7e:b9:
92:b1:1e:7a:51:3c:53:5d:ba:37:9c:2a:23:c8:c7:21:4d:87:
24:89:4c:26:c1:5c:b5:0c:b9:a6:bc:5d:fc:4b:b9:42:9e:90:
b1:ed:57:87:6a:d7:2c:17:48:84:c5:76:94:73:a0:e4:b8:b3:
f0:60:30:f8:61:e8:82:33:56:e5:8c:4a:1d:64:cd:a5:0c:95:
db:da:5b:cb:d5:69:18:b7:47:b6:cb:c7:b1:a1:eb:1d:cb:3c:
c2:2b:4e:9c:7b:ef:8b:36:30:df:6e:bc:1f:36:07:5b:e7:0f:
b9:5c:8a:1b:8d:18:ff:61:57:64:f1:dd:f8:3c:b8:d7:ea:ed:
62:04:78:17:67:a5:8f:57:6c:13:ee:39:60:ea:69:04:94:3c:
73:f5:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:03:40 2025 by rpki-client