Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12bca913-abd9-33e7-8e6e-4eec00b3c7d3.roa
File: 12bca913-abd9-33e7-8e6e-4eec00b3c7d3.roa (raw, json)
Hash identifier: UD2l3jz41Mi3YINt2QwI0phX7/W+Stq39uj+Ds8+Ua4=
Subject key identifier: D1:11:B3:FD:7C:92:82:36:3E:7F:D5:67:9E:A6:DA:65:8D:7D:68:D1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A18DA992B24B95E4C25AAC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12bca913-abd9-33e7-8e6e-4eec00b3c7d3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.194.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:da:99:2b:24:b9:5e:4c:25:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=36a18f28-894d-4327-b7df-0c201ed03d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:f8:70:31:af:fb:9c:6f:b2:d8:48:74:47:
89:6c:2a:a6:79:b9:05:f1:65:24:db:1c:24:13:d6:
8d:1b:45:0a:96:80:91:4d:c6:5d:16:0b:b9:c9:1e:
ae:66:c4:19:4a:a3:c3:89:2f:36:84:48:59:f9:35:
ff:cf:79:75:ee:ac:38:b3:10:08:34:80:f6:bd:88:
3f:04:6b:13:07:d3:9d:78:aa:3e:7f:1f:de:f0:89:
9e:f2:d8:a3:41:ec:b5:5a:d2:47:88:4e:ec:9f:12:
e1:c1:92:80:a0:38:05:67:d5:e3:7d:66:90:7a:44:
a9:d0:fe:a0:59:0f:5f:00:ba:cc:15:ec:32:91:ae:
e2:9d:99:f8:e7:a9:e5:ac:93:bd:bf:60:47:52:77:
59:e2:52:b8:dc:28:e4:ba:92:a8:b6:56:7e:b2:59:
c2:e3:69:89:e0:dc:dd:f1:66:b4:75:02:d1:67:95:
3a:d7:f0:28:1e:b0:26:9e:16:da:07:18:7a:78:2f:
a3:4d:91:74:6b:63:98:60:61:08:73:03:1b:1e:33:
46:14:cb:9b:b1:20:7e:b0:b6:f9:12:b6:82:9c:a5:
04:e7:4d:c1:5b:06:df:05:f6:b2:5f:b6:e5:67:c9:
0a:76:9a:df:18:27:82:af:e0:bf:77:de:b8:4d:fe:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:B3:FD:7C:92:82:36:3E:7F:D5:67:9E:A6:DA:65:8D:7D:68:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12bca913-abd9-33e7-8e6e-4eec00b3c7d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.194.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:16:47:19:48:e0:45:9e:dc:9a:8e:a3:c3:44:87:c9:d6:cd:
05:9a:35:c2:73:a0:63:9e:d1:64:7a:8a:aa:32:8c:de:6c:73:
a4:49:f8:44:7f:2e:96:36:04:34:73:61:f8:6f:c0:c8:d8:5e:
7b:e7:2c:04:5d:4d:4e:d2:49:bc:fd:49:b3:c0:5e:12:ce:82:
73:8b:4a:9d:a8:70:b1:1e:51:15:7a:2e:36:fd:c3:7d:d4:0d:
4f:39:56:75:d2:08:e6:f3:9c:51:fd:a7:11:6a:e2:dd:53:85:
fc:a1:5b:36:e2:fe:15:ca:47:90:b9:ff:c6:bd:23:79:a0:bf:
1e:c9:4e:c5:58:16:9b:6c:79:dd:cd:63:fd:82:cb:ef:bb:3f:
12:6e:cf:2c:4d:ba:3b:b4:b7:40:8d:96:79:97:45:9d:51:71:
17:20:0e:00:04:94:02:ca:8e:71:51:7b:e5:e0:d3:e5:c6:1b:
58:0b:28:9d:d0:d3:46:22:f3:8f:00:d1:33:46:75:f5:91:b8:
f2:3c:32:bf:dc:e3:5d:28:fc:6d:b1:b9:33:2a:97:79:c8:0a:
1a:5c:98:c2:51:a5:cd:ab:84:54:56:35:4e:75:2f:48:e3:07:
76:63:27:fd:fa:06:1d:7e:74:09:2b:62:be:82:e0:c0:8c:5b:
2c:fd:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:30:25 2025 by rpki-client