Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1244bfaa-9552-34c7-8d63-2e8fb3428c2a.roa
File: 1244bfaa-9552-34c7-8d63-2e8fb3428c2a.roa (raw, json)
Hash identifier: YIdRZNndfU/bUga0O0KLEdCVu4reDxFtfBT6uDfta2w=
Subject key identifier: 9E:04:2C:2E:E1:08:9D:71:D1:39:AC:A8:B6:40:DD:14:C2:6B:7C:0F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A24B2D0BC752C5C0DA901C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1244bfaa-9552-34c7-8d63-2e8fb3428c2a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.235.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:b2:d0:bc:75:2c:5c:0d:a9:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=90d5df18-2bd6-4e4a-91a9-901be1812862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:81:dd:d0:5b:22:89:26:c1:6e:10:ef:b1:
89:a9:fd:1e:eb:6b:27:91:d2:22:3a:09:44:d6:c6:
26:77:d5:13:60:c7:48:15:93:a1:f8:ea:40:5d:51:
a6:65:ca:85:fd:2c:6b:4d:e5:fa:6f:58:72:77:5e:
53:b8:c7:02:91:51:05:7a:37:e3:49:c1:30:2a:f0:
5d:9a:a1:20:ba:fc:a4:c1:12:41:a2:bd:0b:a3:b8:
ab:8d:d2:0e:56:f4:51:0a:6d:84:eb:9c:ed:a5:7b:
73:f3:55:11:4a:36:95:da:85:43:1e:ea:71:42:5b:
af:af:fa:6d:9f:59:63:34:8e:64:54:e0:cc:8a:37:
de:3d:27:8b:02:0b:15:89:3b:22:e2:fd:40:c2:43:
93:e0:97:b1:e1:de:7e:b9:74:46:42:95:ea:d3:dd:
f0:1e:ed:e4:8d:95:de:ab:2d:83:21:fa:ec:66:fb:
c3:41:e5:2d:8f:48:52:7f:b7:32:c6:78:97:59:c6:
80:e6:26:ff:cb:98:73:af:a3:ae:b6:b6:84:64:fb:
bf:6d:76:ef:2a:42:73:2a:f7:23:73:8c:ad:cc:31:
40:32:13:a8:02:74:cf:51:8a:98:09:3f:7a:8f:74:
d4:b4:3d:8d:21:cc:28:00:35:56:86:72:67:63:57:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:04:2C:2E:E1:08:9D:71:D1:39:AC:A8:B6:40:DD:14:C2:6B:7C:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1244bfaa-9552-34c7-8d63-2e8fb3428c2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.235.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:eb:a2:8f:44:34:f3:cc:a5:d8:1d:f3:70:e2:48:e9:26:b7:
af:5a:9d:db:c9:de:ea:00:fe:b7:d6:7c:e9:8b:25:d1:11:b6:
b6:6f:89:fb:63:49:b8:29:af:eb:6a:a4:d4:4d:74:47:51:f6:
b9:c3:78:90:43:bc:97:3e:1a:7a:f2:9a:8e:92:4d:06:6e:b6:
77:df:6c:01:3f:cc:b7:05:e3:9d:7d:d2:c7:57:f9:3b:a0:c4:
9f:02:68:65:e4:e6:67:54:03:5d:89:55:d9:cb:be:56:1c:4b:
e3:62:f3:44:25:e5:08:49:e1:70:80:9c:38:e6:55:67:73:5a:
f9:0c:b8:11:5e:98:73:9c:61:85:3d:08:fb:d4:21:49:5d:84:
ff:00:b7:14:ab:38:a4:d9:72:df:43:f9:2b:77:60:ee:0d:1a:
a2:dc:98:5b:da:3a:de:37:2d:9c:b2:db:25:04:70:0e:28:f0:
14:ee:ae:da:c0:ad:0a:b9:ef:89:82:f6:29:1d:90:19:22:64:
21:0d:80:05:33:54:ce:ff:9d:55:ee:fb:14:47:19:17:1b:10:
97:b3:3e:d1:e6:eb:f1:9f:ff:bb:e6:0c:15:23:63:7f:17:07:
62:7b:ee:f6:42:e2:bb:e3:10:37:a6:17:5c:78:35:54:49:f0:
cd:ef:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:19:22 2025 by rpki-client