Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a090604-981e-3cb4-aac3-76fbc972b0e1.roa
File: 0a090604-981e-3cb4-aac3-76fbc972b0e1.roa (raw, json)
Hash identifier: rtYoX2JrzprQzSeO9Keq2fDvCLkgKneyYvdQMRhEELw=
Subject key identifier: 53:B8:F1:EB:06:F6:82:8C:FC:B6:C0:16:A5:7B:08:FE:4F:04:4F:7C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F07FCFD53EF9333BCB9A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a090604-981e-3cb4-aac3-76fbc972b0e1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.233.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:7f:cf:d5:3e:f9:33:3b:cb:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=63976c6e-7c34-4291-b5d1-bc020f8614d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:d1:05:22:cb:f7:5b:aa:cd:b6:19:96:e3:
32:5a:b9:cb:8c:cf:d3:25:01:1a:53:81:c1:72:6f:
53:a9:6b:2c:09:fa:2c:c7:9b:f2:78:38:73:1c:1b:
5f:26:a6:d2:42:00:d4:0a:d2:12:f7:0e:3b:4b:ef:
9f:c6:56:db:bb:54:7e:02:0d:df:d8:a2:10:65:0d:
e9:ad:17:34:06:bd:c4:db:7c:14:d0:e9:f9:80:93:
c8:70:8e:65:54:dc:d2:37:9e:33:90:d1:d2:50:1d:
69:18:14:ad:bb:40:df:c4:6b:2c:6f:1c:42:88:a2:
79:fb:ff:2b:b9:47:1b:ab:40:bd:43:6d:a2:95:94:
e0:60:00:71:aa:57:06:fe:9c:d0:7e:08:c8:9f:7f:
7f:d4:6d:d5:e1:69:f4:31:75:a2:16:2e:c7:d2:25:
d1:68:27:85:ab:37:b3:bd:bc:89:17:0f:6f:78:77:
f1:64:66:d2:2b:b9:d6:34:1c:cd:9c:88:b6:ef:c9:
d7:56:b5:22:0b:d3:13:37:42:f5:7a:04:65:97:1e:
c2:21:87:96:5d:6b:01:75:5d:dd:c9:fe:65:3d:84:
da:0e:b8:4e:3e:99:d2:6c:82:63:08:18:7a:a1:c4:
e7:a9:b3:aa:3b:63:10:46:1c:2d:3f:40:e2:7d:b1:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B8:F1:EB:06:F6:82:8C:FC:B6:C0:16:A5:7B:08:FE:4F:04:4F:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a090604-981e-3cb4-aac3-76fbc972b0e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.233.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:b8:ca:88:bf:ad:71:5a:7c:c8:54:37:08:98:50:20:9d:f4:
39:11:a9:bb:f1:40:aa:a7:d3:26:6b:36:92:37:8e:2f:27:9f:
5f:e3:1c:e1:a4:7b:95:9e:cb:f0:ea:7b:6d:21:eb:b5:0b:32:
57:5e:f2:f9:55:02:a6:03:07:ce:20:20:dd:d6:b7:85:ad:1b:
a4:55:c6:37:c5:1d:fa:b1:4e:81:67:80:38:df:85:60:6a:ea:
e7:a3:12:b1:a6:73:19:cf:31:1e:6e:9a:38:9e:44:31:77:20:
d5:fa:ba:83:d9:45:82:9c:79:7e:ff:9b:07:0c:7a:20:9d:f8:
78:08:50:a1:cc:67:aa:22:a9:2f:66:7f:8b:91:c8:01:be:8e:
ad:26:71:2c:61:e5:35:ec:24:95:50:8c:4c:58:76:9f:3d:85:
74:91:88:f3:b9:72:4f:c0:1d:a3:a5:80:93:93:d9:e9:2e:54:
cb:d1:f8:db:50:41:79:47:f7:0f:66:04:7d:ee:8c:af:e7:43:
95:4d:00:e2:3a:8b:02:e0:c8:e1:20:50:16:1f:8b:59:94:9d:
97:f1:ae:97:64:e9:a0:ba:9a:77:37:64:7a:99:a2:9e:3d:bf:
34:87:f4:85:4d:0b:fa:c9:05:d9:ae:fa:a1:b8:30:f0:53:77:
0a:f2:d9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:54 2025 by rpki-client