Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9a14cda-e0d3-375a-bf70-c98965810932.roa
File: f9a14cda-e0d3-375a-bf70-c98965810932.roa (raw, json)
Hash identifier: FU1uJubH+DVx9QeeRe6eG8h6i6gZ5ch+P2vFCJEyVKg=
Subject key identifier: 18:84:2F:81:23:11:AD:D6:A3:E5:05:4A:9C:DE:18:7C:96:F7:1F:A2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BADFCBB505092656FB2500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9a14cda-e0d3-375a-bf70-c98965810932.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 104.154.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:df:cb:b5:05:09:26:56:fb:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9fc620e3-af9b-43a6-b123-bef74bf0d723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:ff:d8:d8:b0:53:b6:fc:ae:a1:18:83:61:
7b:18:fe:c5:59:f0:87:cb:0b:86:38:fd:38:57:ff:
25:18:b6:cd:fa:dd:5e:69:ed:74:b8:37:47:19:73:
75:a5:15:68:42:fc:13:5a:d4:bc:4a:a8:a3:e0:27:
57:09:b3:1d:8b:9f:72:f1:82:74:bd:b2:cc:b5:c8:
14:9e:37:5b:35:4d:ee:34:73:4e:c7:45:0e:2c:5e:
25:da:72:70:23:44:60:7a:b1:6c:95:ea:f2:4e:55:
23:f8:45:76:36:2e:90:75:55:14:4c:0f:ba:ab:2f:
f7:0e:c6:6c:b5:9b:91:cb:65:5d:37:84:df:9b:75:
46:ba:d6:26:d3:54:1f:e8:90:ea:87:32:88:3e:b9:
a6:2f:8c:27:ee:ba:51:af:7c:b3:76:88:a5:18:b6:
97:3f:b8:5a:4c:ad:f7:25:e1:7c:6b:dd:df:3b:9c:
24:d9:c1:71:54:da:47:c2:11:b3:e7:5e:f7:76:ef:
a5:58:15:4f:d3:63:b7:61:c3:5a:ba:4a:ef:48:d6:
3e:b8:d8:28:36:a4:17:45:a3:f3:c5:0a:a3:f9:28:
85:df:e0:ab:34:d9:83:1c:8b:61:42:e9:c8:20:6e:
fa:b8:51:10:d8:fc:8b:c5:09:b5:af:fd:74:66:17:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:84:2F:81:23:11:AD:D6:A3:E5:05:4A:9C:DE:18:7C:96:F7:1F:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9a14cda-e0d3-375a-bf70-c98965810932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:e6:1c:2a:d6:55:1e:58:c4:d9:0e:6f:36:a1:42:3b:88:68:
db:05:4d:f4:29:ad:da:9f:8b:f0:dd:8e:34:b9:be:a9:b8:1d:
8e:43:ba:27:9f:60:e6:7d:da:df:a4:4a:eb:f9:4f:b5:68:78:
80:44:c6:bc:94:16:c3:d2:f1:c1:73:f6:26:e1:dd:28:31:d2:
70:9d:c8:56:23:4c:8c:b2:da:72:61:af:9b:8c:c9:9c:a4:24:
d3:71:38:8b:8a:c6:bf:9d:06:15:63:1f:77:20:5b:a0:69:23:
db:13:23:ed:a5:cd:a3:9d:6b:4c:f9:f3:04:25:a3:1d:14:13:
07:07:c0:f3:c7:02:09:39:52:01:52:ab:80:28:df:57:47:d2:
5f:be:af:5a:c4:0f:09:40:9c:51:46:5b:18:1f:e7:5b:25:80:
fe:7b:97:66:d1:91:b8:3c:85:1f:55:d6:98:cb:bd:72:2f:a9:
ab:7d:0c:25:43:41:95:4f:08:1f:22:cf:2d:1e:8c:83:5e:84:
04:2c:17:39:e8:95:48:ee:aa:a5:12:f7:c0:2b:2a:5f:a7:52:
a4:bb:27:be:82:fa:de:3b:93:91:a8:d4:d4:87:60:d1:2d:aa:
81:11:43:f1:43:32:49:b7:96:73:b1:1b:a8:b8:fb:3f:20:01:
0a:c1:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:29:47 2025 by rpki-client