Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa45f97b-bd2a-33d0-bc84-a82cdb0d6f5a.roa
File: fa45f97b-bd2a-33d0-bc84-a82cdb0d6f5a.roa (raw, json)
Hash identifier: bhhfEIlBiSop0rxwyPyxS9ZLS22KsjnFm0vYDZyuRA8=
Subject key identifier: B1:85:8C:81:BD:F9:8C:4D:EE:99:CC:50:42:11:7D:C6:34:0B:CF:84
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A07FE14909DFF81A3B1C840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa45f97b-bd2a-33d0-bc84-a82cdb0d6f5a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 104.154.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:fe:14:90:9d:ff:81:a3:b1:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e7fb85d2-a46d-4974-a88e-da4f07549ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:96:95:e1:a4:af:88:97:d6:cc:30:32:db:
05:f8:6b:4e:64:c2:68:7f:06:dc:ab:9b:28:08:fd:
83:4c:be:8e:78:bc:1c:e8:ea:3d:79:b8:fe:3d:b7:
2a:a0:95:19:84:83:0c:4e:69:69:9c:23:25:06:8a:
c1:a7:03:54:e2:0f:18:c5:ff:6f:a8:66:cf:23:71:
c9:99:b0:d5:28:df:2a:08:7c:ce:a4:3d:4c:56:bc:
06:40:ca:24:85:53:b3:3f:6c:ec:e7:21:da:9d:e3:
81:90:ba:88:75:ec:6c:e2:6c:71:d5:8d:94:cd:6d:
f3:c2:e4:0f:01:ba:8b:f1:22:f6:bd:fe:03:72:2c:
ca:9e:b0:0f:7e:32:f9:bb:2e:38:93:f5:61:85:e7:
0d:cf:24:b6:6b:33:0a:f5:2f:6e:0f:00:17:4f:44:
11:be:45:77:b8:09:75:97:22:d3:26:94:ce:47:5b:
65:0d:9c:b4:e6:37:a0:08:b6:06:95:82:a2:73:9d:
7e:f8:ca:a2:6c:b4:f6:18:48:e3:80:42:f5:67:dc:
90:5a:f4:e5:3c:62:db:09:ba:cc:99:c7:96:3c:45:
95:4f:e0:88:10:29:f2:80:11:64:4a:47:28:83:1b:
6b:0b:ff:bd:da:dc:33:f7:de:e8:3b:0b:f6:d1:68:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:8C:81:BD:F9:8C:4D:EE:99:CC:50:42:11:7D:C6:34:0B:CF:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa45f97b-bd2a-33d0-bc84-a82cdb0d6f5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:4c:e9:d7:dd:61:15:7e:f6:b3:6a:c5:be:aa:cf:30:a1:47:
64:6c:5a:49:7a:cb:83:dc:e9:3d:18:b1:47:ef:ca:31:20:7e:
9c:bb:8d:28:58:dd:87:95:f8:84:e9:ab:b8:a6:20:07:a6:c6:
1a:b0:2a:1f:8f:3a:8c:41:e9:c4:78:68:2b:85:ca:93:3a:18:
02:1f:19:65:9c:44:11:aa:c9:88:c7:19:16:10:46:f5:b3:66:
75:66:84:f3:fe:b3:f8:f3:a1:c3:65:ec:08:f4:31:fa:9c:a2:
5a:6f:88:da:84:1a:37:38:a1:0f:64:16:1e:50:94:b5:44:44:
d8:25:41:1f:fb:62:d7:e2:c6:5c:8e:02:a7:11:3e:ca:41:f1:
a5:83:59:d3:de:af:ed:75:96:1f:d4:7a:17:27:1b:83:87:19:
d4:d9:fe:60:58:a4:58:9f:ca:d6:d4:5b:1b:42:50:de:06:7a:
22:11:5c:99:f2:9f:86:9e:47:69:20:b2:34:cf:cc:3c:77:43:
c7:92:4b:a6:14:7f:60:f6:2d:b3:5b:2c:b6:97:20:69:a6:d2:
9d:3c:b8:15:66:31:b7:68:1e:bb:1b:d1:16:58:00:1c:0f:ac:
38:cc:7c:87:2d:0e:ca:bc:c2:4d:e7:b4:54:d6:9c:00:1f:6b:
5f:f6:e1:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKB/4UkJ3/gaOxyEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTdmYjg1ZDItYTQ2ZC00OTc0LWE4OGUtZGE0ZjA3NTQ5YWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgICWleGkr4iX1swwMtsF+GtOZMJofwbcq5so
CP2DTL6OeLwc6Oo9ebj+PbcqoJUZhIMMTmlpnCMlBorBpwNU4g8Yxf9vqGbPI3HJ
mbDVKN8qCHzOpD1MVrwGQMokhVOzP2zs5yHaneOBkLqIdexs4mxx1Y2UzW3zwuQP
AbqL8SL2vf4DcizKnrAPfjL5uy44k/VhhecNzyS2azMK9S9uDwAXT0QRvkV3uAl1
lyLTJpTOR1tlDZy05jegCLYGlYKic51++MqibLT2GEjjgEL1Z9yQWvTlPGLbCbrM
mceWPEWVT+CIECnygBFkSkcogxtrC/+92twz997oOwv20WhzLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGFjIG9+YxN7pnMUEIRfcY0C8+EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmE0NWY5N2ItYmQyYS0z
M2QwLWJjODQtYTgyY2RiMGQ2ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJpQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARM6dfdYRV+9rNqxb6qzzChR2RsWkl6y4Pc6T0YsUfvyjEgfpy7jShY
3YeV+ITpq7imIAemxhqwKh+POoxB6cR4aCuFypM6GAIfGWWcRBGqyYjHGRYQRvWz
ZnVmhPP+s/jzocNl7Aj0MfqcolpviNqEGjc4oQ9kFh5QlLVERNglQR/7YtfixlyO
AqcRPspB8aWDWdPer+11lh/UehcnG4OHGdTZ/mBYpFifytbUWxtCUN4GeiIRXJny
n4aeR2kgsjTPzDx3Q8eSS6YUf2D2LbNbLLaXIGmm0p08uBVmMbdoHrsb0RZYABwP
rDjMfIctDsq8wk3ntFTWnAAfa1/24Vs=
-----END CERTIFICATE-----
Generated at Sat May 10 11:29:10 2025 by rpki-client