Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04337f94-4ff9-3ec2-a432-48b0bad4098d.roa
File: 04337f94-4ff9-3ec2-a432-48b0bad4098d.roa (raw, json)
Hash identifier: GcBwQ1Pn0CYhJC4hybz/lWep5HQQ4BaG9/84cYSNfp8=
Subject key identifier: 8B:04:C4:7E:61:A3:94:F1:30:08:30:75:BF:E3:CF:A5:ED:35:13:15
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EE483A5456BB7DFA48D180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04337f94-4ff9-3ec2-a432-48b0bad4098d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.239.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:48:3a:54:56:bb:7d:fa:48:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=066158ea-0020-4c0e-a813-82f127cc7c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:95:b8:a9:b1:8b:d3:62:12:83:12:31:5b:
97:6f:89:ad:30:27:c7:4e:d3:3a:d4:57:02:7c:b7:
5c:c5:d1:93:0d:76:49:3b:0d:22:dc:b9:73:c3:be:
ec:8c:52:ae:83:6d:d8:ef:ec:20:6e:2a:c5:a0:54:
6d:41:1e:54:05:c1:38:8e:45:27:7b:29:13:9d:4d:
10:71:50:41:ba:62:1b:57:84:5a:c3:72:05:49:81:
b8:e6:30:ae:20:40:1c:e1:82:9e:6c:fb:93:5b:17:
ef:a3:05:3d:77:35:e2:33:fa:22:b1:f8:bf:9a:dd:
7d:7f:43:54:7c:86:4b:34:d7:c4:25:8c:0f:87:54:
15:e8:1e:bb:4c:ac:06:c8:72:ac:fe:af:ea:ab:bd:
53:0a:31:6d:25:e2:ea:d5:1d:cf:c8:dc:4d:7e:8b:
e3:3d:ff:c1:76:0c:bf:39:48:19:df:9a:3a:3f:76:
71:1e:c2:8d:2c:7a:e2:4d:16:31:9a:08:e1:a5:fa:
39:03:ee:64:56:ea:1c:d9:a6:c4:ab:1b:65:a4:74:
2e:73:89:ea:1f:52:c2:a3:b9:fa:56:d5:61:99:4d:
2c:81:7f:34:f0:8d:ed:9d:78:7b:b1:6f:29:62:e2:
d1:42:59:87:64:1c:c4:e8:88:6f:1a:93:09:eb:65:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:C4:7E:61:A3:94:F1:30:08:30:75:BF:E3:CF:A5:ED:35:13:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04337f94-4ff9-3ec2-a432-48b0bad4098d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.239.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:1b:3d:21:b8:e2:36:d1:3d:e2:a0:ce:e1:2c:dd:d2:75:21:
ad:a9:64:db:ae:31:d5:33:47:8a:b5:98:3d:3f:87:2c:f9:37:
cc:1c:45:fb:23:9e:67:6d:d6:90:49:18:2d:4f:ef:c8:3b:1b:
d1:b1:10:8a:52:43:1d:6b:a3:ac:bf:24:e9:1a:1e:5a:16:3d:
46:80:a0:36:7c:55:2e:1b:1d:ba:ea:9f:bb:39:80:f5:73:ba:
49:31:28:24:df:80:ab:41:4a:ec:00:99:b8:69:65:51:de:0c:
da:39:59:8d:27:e2:39:ec:cf:cb:1a:b6:c2:91:22:b8:7e:88:
e3:3d:44:eb:da:85:2c:c6:57:04:56:ff:bc:2c:d8:9e:e6:6b:
8c:a1:1e:d3:18:94:65:d5:10:ee:a2:89:f8:ea:a8:43:ef:b7:
d0:04:c6:16:66:1c:46:fa:a5:71:5d:fc:3b:53:61:82:5e:c5:
ea:bf:53:70:55:0a:ea:98:37:2d:71:39:7e:bb:b5:a5:34:c5:
ce:2c:14:e5:b3:ef:a5:26:a4:e8:b4:cb:3c:ba:3b:ff:32:8c:
ba:a3:d3:75:8c:94:14:62:84:e9:46:62:b3:dc:fe:75:a3:14:
83:a7:dc:54:f7:fa:f0:a1:c6:6e:1b:3b:89:31:01:99:38:d4:
32:02:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:15 2025 by rpki-client