Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10afa187-0cea-3a15-890b-7f44d0a92481.roa
File: 10afa187-0cea-3a15-890b-7f44d0a92481.roa (raw, json)
Hash identifier: QsXjK7Jr0k85CYXdhvNClZJir9lYT6+DBD8XxlN8/3w=
Subject key identifier: 4B:C7:E3:65:3F:58:5F:A3:03:DC:8C:AD:D6:24:88:C7:0F:73:63:41
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6710FDE81A2215007F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10afa187-0cea-3a15-890b-7f44d0a92481.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.186.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:67:10:fd:e8:1a:22:15:00:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=71f7830f-5364-41e8-a445-0321dd4a19f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:de:73:80:4a:34:7f:a7:b7:df:3d:16:bc:
51:d5:22:99:5e:eb:25:0c:2d:dd:0f:b9:85:ad:5d:
36:1b:9f:ce:2b:49:62:ef:96:02:d9:a5:4d:d3:cb:
56:05:c0:7b:c0:71:77:7f:31:25:de:0e:a0:88:dc:
73:2b:5a:d3:f7:14:9d:ff:6f:66:99:ee:b1:96:e8:
b9:73:72:d3:c2:01:9b:3a:c1:76:9f:32:ba:9e:c2:
56:23:df:bf:98:b7:a4:17:30:17:2e:57:6c:0f:46:
cc:b4:68:53:93:41:06:90:42:08:38:e2:a9:6e:f9:
be:35:86:ff:5f:53:88:47:48:df:ac:01:0b:0d:b4:
c8:51:57:dc:91:a5:41:2b:77:d9:2a:06:9c:81:cf:
8a:66:8f:cd:ab:f7:cb:75:dd:45:64:45:8c:d2:10:
c4:1b:25:fb:c2:c1:b6:90:7b:ec:88:87:93:76:c2:
da:47:85:08:bd:51:0c:92:8b:01:93:01:78:00:6b:
0f:c3:ef:e2:64:d5:7b:af:b0:69:d2:9d:f4:3a:06:
7f:e4:4f:88:9d:45:a4:0c:39:18:de:1f:c2:a5:6a:
dd:47:43:e5:9a:b6:9d:d2:c0:e6:12:09:f8:af:e9:
91:ed:bb:c5:ff:e0:38:18:c8:a0:a0:ed:7d:80:d1:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:E3:65:3F:58:5F:A3:03:DC:8C:AD:D6:24:88:C7:0F:73:63:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10afa187-0cea-3a15-890b-7f44d0a92481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.186.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:35:75:4c:d6:10:29:a0:83:ea:0c:6f:e9:c4:57:ef:1c:7f:
aa:ce:0b:4d:4c:e9:82:a8:dd:dc:62:35:48:48:b2:72:ce:12:
c8:bc:e4:78:e8:68:7f:2d:cd:b8:10:d2:d3:5f:50:84:b4:5f:
53:41:6a:e8:43:99:ee:06:ab:3b:84:39:d8:44:21:ed:a8:98:
ea:17:cb:37:9c:a9:9f:ac:19:5f:a7:b1:b8:5e:41:18:62:bc:
d5:ca:ae:20:51:6c:08:1e:aa:c0:0a:22:78:ff:14:a2:01:fd:
c4:1e:83:c3:97:20:fb:9d:8e:4e:68:b8:7b:42:86:da:ce:25:
46:b8:12:37:86:24:c7:f0:42:6f:82:4a:c1:81:56:e5:00:60:
33:5d:a8:60:52:81:c4:ce:48:43:75:0b:52:94:e6:c4:64:5d:
3d:2f:97:da:48:e0:9b:13:13:4d:f1:79:40:4c:2b:29:de:ba:
fc:b5:7c:dc:dd:4e:cc:a4:d5:d4:f6:0d:ab:56:50:35:3a:cf:
36:37:02:ec:d1:10:4e:0d:37:22:f0:30:5d:a9:63:85:ae:34:
d0:80:b6:f1:84:09:3d:8c:25:92:7b:90:19:cd:a4:73:64:bf:
56:57:ee:f4:45:e0:41:45:a6:f8:e3:e9:fe:5d:41:a4:e3:fe:
b2:9a:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:22:44 2025 by rpki-client