Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5db03b7-ca04-3c71-be31-7ae3437d1f6b.roa
File: f5db03b7-ca04-3c71-be31-7ae3437d1f6b.roa (raw, json)
Hash identifier: JGEoKPYWSwadIpNYBLXvYgzrf1/WqHXKifKOU+Wmv0U=
Subject key identifier: 85:8E:25:B5:F7:AE:5F:FF:EB:73:02:4F:8E:FF:C5:C4:54:6B:81:6B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A20E9858977C9106D474480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5db03b7-ca04-3c71-be31-7ae3437d1f6b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.199.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:e9:85:89:77:c9:10:6d:47:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=aa7e1b0d-82bd-4874-b53b-3e471fba59e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:71:6b:81:7e:30:42:dc:54:08:7a:8c:22:21:
bc:c0:e9:68:a5:a4:2d:d1:f4:95:c4:6a:43:5c:a9:
e7:d4:dd:a4:48:8f:c6:a6:92:87:e1:a0:39:33:ea:
4d:74:ce:25:68:53:04:b1:dd:0c:bd:c4:5e:5e:27:
17:e8:49:33:a7:52:2f:bb:87:dc:1f:34:f5:4e:3e:
0a:c1:f4:99:81:56:28:61:4d:a3:66:63:a9:1e:5f:
28:9b:04:61:95:9f:5b:c6:06:9e:a5:be:02:ed:40:
b3:3a:22:5d:2b:a6:af:5b:99:30:50:b1:79:14:24:
02:72:b5:1f:e9:a1:93:c8:9a:66:18:c7:42:65:8d:
7e:7b:60:e0:28:c5:80:7a:fc:d6:e7:d5:eb:a5:32:
4d:7d:90:17:0a:d4:d6:bc:a7:c7:d4:3e:db:19:41:
6d:2c:2c:29:e2:85:d1:4d:af:b5:01:56:47:ed:5c:
c5:b5:f8:28:db:79:61:23:af:1b:ab:29:93:6d:fe:
a1:e5:c9:d2:b9:f5:4f:ba:4e:9d:42:13:bc:55:83:
0b:5e:69:f7:1e:d0:45:53:03:a1:50:5e:d6:be:50:
60:e3:ab:c0:64:98:4f:42:57:55:d1:07:a7:78:90:
2f:54:39:16:48:b2:e8:69:7f:56:e9:04:4c:7d:2d:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8E:25:B5:F7:AE:5F:FF:EB:73:02:4F:8E:FF:C5:C4:54:6B:81:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5db03b7-ca04-3c71-be31-7ae3437d1f6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:5e:e3:a8:44:91:8d:2a:1e:63:09:74:1c:60:1c:01:28:60:
38:49:03:96:36:02:d6:e1:be:e5:df:89:da:12:60:7c:83:ba:
24:26:13:32:50:8d:ff:21:3c:3b:e9:80:6d:4e:80:9a:ee:ab:
ac:ac:ec:d2:45:08:84:4e:97:6b:f6:bb:99:c8:9f:a8:41:38:
3e:a0:8b:61:fc:2d:7e:fb:19:5b:e2:4c:ce:f1:ff:70:27:83:
4a:06:c8:d7:24:18:eb:b9:cc:db:82:8b:e0:74:70:8a:7d:a8:
c8:e6:24:e3:66:9c:9a:c4:9c:f3:12:14:f1:89:c1:d5:10:31:
9b:ce:43:b5:44:da:a5:7a:90:ec:59:24:87:dc:dd:4a:60:b4:
87:83:4a:ef:ed:99:8b:4b:79:30:c5:3f:48:7d:60:f9:77:d1:
a5:69:fa:79:24:80:65:9c:56:c8:70:dd:fc:6e:ca:ef:8b:58:
f5:85:13:d5:d4:bc:26:ce:8b:65:2b:5f:f4:8b:87:f3:06:dd:
dc:96:d3:cc:f1:fb:99:4f:11:64:1d:34:b4:51:26:3a:c0:6a:
da:25:6e:d8:02:6e:a8:d8:17:e7:cc:c4:16:c8:9f:7d:7e:5c:
1e:ff:a5:0d:a8:ac:60:da:f7:dc:32:52:52:a0:ff:da:e9:20:
e2:91:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:47:46 2025 by rpki-client