Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ea4cfa3-3764-3468-8695-5a702736a8d5.roa
File: 0ea4cfa3-3764-3468-8695-5a702736a8d5.roa (raw, json)
Hash identifier: wJxnkx0kKLwowvcXDLOE4K2SmHqIU6skcj4WGSKA6mI=
Subject key identifier: CD:8D:15:20:7B:4A:F7:FF:69:C8:1E:2C:D0:DE:EC:32:7F:41:18:CD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FC5D59232F59B7DD7BD5C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ea4cfa3-3764-3468-8695-5a702736a8d5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.224.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fc:5d:59:23:2f:59:b7:dd:7b:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c169243a-f059-48e5-b332-435466b2b7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:a2:17:a7:60:38:bc:05:fe:c6:0b:97:4b:
4a:14:5d:f4:33:ca:8f:75:80:67:d6:2f:5e:8c:3a:
15:3b:84:62:71:6e:a3:9d:76:f7:3b:53:0b:44:de:
34:e4:02:c2:2d:c1:16:97:24:6f:dc:63:5f:aa:93:
a6:0d:a0:47:46:e0:15:a8:be:2f:78:f0:8d:a4:6f:
3d:f1:24:82:0c:95:e0:51:3e:d0:5e:31:fd:fc:d8:
af:c9:b1:6e:31:8b:e8:1c:b2:69:e6:07:c4:89:5d:
48:10:7e:ca:8c:75:64:5d:d8:87:23:c8:0d:52:f7:
1e:d4:35:ad:49:ce:3c:cc:34:18:5b:4c:8e:f8:c7:
a9:29:a0:02:32:24:75:6b:61:1b:6e:ce:46:e4:53:
ba:21:2d:c0:4b:59:77:57:13:fd:68:06:38:4d:e9:
52:d9:8a:9b:d1:3b:76:ec:51:38:0b:2d:db:0e:e1:
35:9c:09:70:6f:b0:b3:24:79:ae:02:7b:01:6d:76:
bc:43:17:2e:bc:8f:04:85:60:04:ee:14:b0:7c:d6:
44:94:1a:ca:84:39:f2:78:96:73:74:6b:b1:9d:75:
38:df:f9:ac:0c:74:0a:d9:b8:99:0f:d4:67:98:52:
f0:58:66:92:b6:27:b0:9b:10:58:0d:c5:cf:24:a5:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:15:20:7B:4A:F7:FF:69:C8:1E:2C:D0:DE:EC:32:7F:41:18:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ea4cfa3-3764-3468-8695-5a702736a8d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.224.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b1:25:93:d5:41:90:85:f7:70:17:f5:1b:fd:0d:7d:88:d7:
8c:06:a4:cf:9d:f9:dd:9f:ca:36:81:91:31:7e:9b:7f:a9:9b:
e4:8a:a9:c6:dd:46:ea:4f:0a:06:67:17:d2:1c:d4:d7:26:6e:
c4:9f:0a:62:17:83:a1:8d:90:71:d9:7e:c5:c0:aa:87:27:18:
50:1e:88:47:6c:02:34:6e:d1:72:33:cc:cb:2e:c0:47:82:eb:
72:0a:ae:cb:32:01:96:72:28:f0:e1:08:92:80:a7:68:c1:64:
01:fb:ff:70:e9:0a:67:76:52:b3:e1:a5:93:8a:58:39:21:0c:
28:dd:7b:df:5d:06:91:6c:03:87:9a:a5:2b:09:62:b7:cd:ab:
18:f4:17:c2:0d:4e:83:cb:66:f0:9b:15:88:fc:77:f2:7b:d3:
bd:9f:a5:4d:fe:aa:10:44:9a:bf:a4:f2:e9:c9:19:56:68:3f:
e6:89:62:fb:08:be:91:1b:f9:9e:52:53:40:d6:1d:b6:31:16:
f6:86:3e:c5:17:7e:4c:d1:47:d1:68:22:f3:d6:33:c6:87:7a:
a1:26:49:57:d1:32:fa:cb:f6:1d:6c:65:61:97:f7:b6:f2:26:
b5:57:ad:0c:6e:07:c5:52:d4:47:e2:3a:a2:7b:fc:ee:8b:15:
20:2c:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:55:11 2025 by rpki-client