Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6b0f7b0-22ad-3dec-8f32-0dca3296de2e.roa
File: f6b0f7b0-22ad-3dec-8f32-0dca3296de2e.roa (raw, json)
Hash identifier: mqODn4LOb5C2C8pPz4RT46VPAau5WTDj+xwHTg6rvYA=
Subject key identifier: E0:12:45:A5:7F:35:F3:29:58:7D:2A:6D:87:F4:20:C4:47:DF:AC:54
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A08ABC20B56AA330A1E5C08
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6b0f7b0-22ad-3dec-8f32-0dca3296de2e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.198.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:08:ab:c2:0b:56:aa:33:0a:1e:5c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=899ac582-0817-46d6-b954-f9783453f583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:d0:aa:ec:f6:a9:f9:d8:d8:bd:6d:fb:4e:
5c:5b:1d:c2:14:d2:d6:ae:63:17:a4:af:0c:f2:2c:
fe:a7:fe:25:7f:1e:2d:40:c7:99:8a:71:f6:32:ec:
48:da:0a:56:f4:06:a1:8b:a7:b6:2e:f1:ae:d7:26:
c5:08:af:09:31:0c:32:9d:b1:7d:7f:42:6e:55:d5:
85:f7:96:52:8d:e3:80:aa:c1:0b:53:a6:f0:d1:50:
99:85:da:ad:08:82:ab:9f:90:c3:1c:4a:44:f4:1d:
d3:fa:cd:5b:58:79:f3:d2:a1:b1:bd:e3:f1:59:3c:
10:01:72:ce:59:22:c7:81:ec:bb:f6:55:3d:57:fb:
05:23:da:51:b3:ea:16:8c:88:90:53:fe:6e:de:45:
0f:42:6a:4e:70:59:a2:ab:16:3a:d4:9f:c5:d3:40:
83:31:21:84:32:fa:99:3b:bc:c2:51:a8:1f:85:c0:
25:a5:63:7d:df:33:1f:bd:3c:c7:67:55:1e:db:4f:
e4:47:58:9e:a4:62:95:8a:0c:d3:df:d2:8c:4f:5e:
d7:45:2b:7b:50:93:a3:a8:8e:4e:c8:10:e5:6f:d7:
f4:8b:af:e6:cb:9b:1a:dd:11:25:1c:a5:ca:28:cb:
0d:f9:30:e8:52:75:a6:c2:0e:3f:10:63:c2:5c:2f:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:12:45:A5:7F:35:F3:29:58:7D:2A:6D:87:F4:20:C4:47:DF:AC:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6b0f7b0-22ad-3dec-8f32-0dca3296de2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.198.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:4b:69:0e:0a:ae:b0:c4:c1:9b:d3:34:8a:55:40:80:9e:50:
16:7f:db:ee:f1:f0:32:58:78:ff:af:34:bd:d3:05:cb:6e:cf:
4e:d5:6f:3a:74:d6:5d:3d:d8:44:1c:4d:9c:60:e8:85:f2:09:
05:73:86:fe:22:1f:28:a2:50:af:b7:e7:50:07:82:3a:75:d8:
ec:c3:b5:bb:cf:95:79:df:57:72:14:7d:a0:98:eb:10:cd:d7:
2a:bf:0d:b5:40:2b:d3:4f:31:4f:2d:1e:ec:a0:7c:6b:41:4f:
16:e6:07:71:b2:93:f6:1e:23:7a:37:8f:19:6c:7f:cc:69:03:
9f:08:4c:4b:19:14:96:96:08:8b:01:f2:e3:2e:0f:d6:1e:88:
24:a3:20:6c:59:8b:cd:66:11:04:39:39:b6:8e:d4:b9:95:dc:
84:45:0c:76:c7:27:48:30:f2:2a:a6:5d:25:8c:45:7f:7b:dd:
84:ab:5d:72:58:7c:ef:76:de:70:3e:fe:ed:77:93:b7:e3:d7:
44:7b:b9:f2:28:f5:9f:12:c6:d2:e6:80:de:01:fd:c6:61:e2:
ca:ea:87:12:74:15:4d:1d:88:07:54:f1:f9:6b:9b:53:2d:93:
18:0b:9c:7a:c1:fb:4a:6d:df:d4:9f:88:b8:7e:05:bb:4b:4f:
d9:ed:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:10 2025 by rpki-client