Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10cfb80f-8ec8-33b5-a890-9d8347f5b298.roa
File: 10cfb80f-8ec8-33b5-a890-9d8347f5b298.roa (raw, json)
Hash identifier: ZBVrXPyLvb8i7pjiC/4W+0o+H439RykTKS+Nly5akiE=
Subject key identifier: 96:44:A1:A4:F5:0B:D3:C1:DD:87:2E:0E:92:C7:4E:E3:B8:B8:13:23
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0CC479D946BA48EE8D6680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10cfb80f-8ec8-33b5-a890-9d8347f5b298.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.243.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:c4:79:d9:46:ba:48:ee:8d:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7331311f-7081-4df1-83e2-81622a16400a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:37:73:62:80:07:e3:12:3d:57:c6:b2:f2:
4c:7a:79:4d:2d:e9:4c:6d:d0:bf:3f:ba:81:cc:9f:
8d:12:aa:fe:23:54:50:ee:8a:af:04:4e:cd:81:e6:
11:f1:18:34:bb:6f:6c:dd:1d:62:5f:c3:b2:d6:f1:
78:7d:87:46:c6:e7:8b:32:98:32:53:aa:58:f3:18:
59:15:ff:18:64:71:ae:06:aa:c0:17:a2:92:af:4d:
2f:64:71:97:7b:ff:c3:72:9c:ca:d5:1a:08:12:97:
67:68:5f:eb:80:ee:94:bd:23:f5:2e:6a:4f:b9:62:
83:71:86:bd:88:77:5d:e9:9a:b2:57:94:aa:f4:37:
0a:d3:9c:8a:54:3e:ef:b9:1f:82:54:1b:4b:c6:56:
bc:54:e4:77:e7:60:d5:ff:14:dd:ac:b4:bb:eb:a7:
c6:76:39:82:61:5a:9f:61:fb:eb:67:10:5e:be:23:
2d:c0:ba:ed:9e:fd:88:ad:37:8f:a2:e6:39:17:38:
32:48:a2:04:35:43:f0:6e:8e:6d:8a:e7:02:58:ee:
aa:75:c5:53:c3:f5:c6:6b:15:26:d8:27:c0:c4:2b:
f2:a4:0a:82:90:aa:33:db:1a:0d:53:19:7c:6b:58:
76:c9:c8:15:b4:ff:7d:7c:18:83:fe:34:10:bf:89:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:44:A1:A4:F5:0B:D3:C1:DD:87:2E:0E:92:C7:4E:E3:B8:B8:13:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10cfb80f-8ec8-33b5-a890-9d8347f5b298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:89:b3:c4:03:2b:c2:de:29:db:b6:9c:77:16:d1:ac:33:98:
83:f5:6d:d5:41:49:25:4f:20:9a:2d:39:87:3b:66:0f:6c:df:
c6:0e:ed:5e:7d:fc:33:29:8c:a1:2b:ef:ab:d5:1c:41:e9:24:
1c:28:4d:ac:5f:3f:11:86:8c:3a:34:e6:b9:7e:34:26:73:22:
96:d3:36:c5:5e:da:cb:8d:15:bd:1c:07:81:33:60:ec:d8:da:
6a:56:36:0e:69:7c:a2:72:a1:31:93:75:38:98:d5:19:6d:08:
f4:3d:d7:60:d7:88:b1:07:f1:19:6b:14:d6:d3:6a:aa:12:0a:
65:08:d7:2d:21:d0:37:70:d5:8b:9c:d0:fc:51:4e:1f:f2:c3:
0f:93:0f:8a:7c:f2:6a:57:8a:51:eb:1d:10:5e:aa:27:f1:64:
66:7d:d8:fc:3d:b9:ce:0c:31:25:71:f7:7a:ba:db:88:c7:68:
e2:42:c3:62:c5:eb:10:8b:fb:31:5d:43:26:97:85:68:f8:55:
09:2e:81:cc:d3:b1:da:c7:9e:17:fd:64:19:1c:7e:6e:e8:70:
be:f1:78:ea:07:99:b7:35:98:43:f6:0a:f4:1d:68:bd:f9:5d:
af:2a:8c:4c:ed:81:93:a2:ce:e4:18:24:71:98:da:16:b3:ea:
a1:da:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:41 2025 by rpki-client