Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d23a82c-1fad-3518-bb17-dc0ac459dc14.roa
File: 1d23a82c-1fad-3518-bb17-dc0ac459dc14.roa (raw, json)
Hash identifier: sYp8PsAIzrXxiGdmQYJ7Xiy5kYzglSRx9slUD4sYMoU=
Subject key identifier: 7E:62:63:24:15:24:9F:B8:36:ED:43:6D:6E:FA:1B:2E:91:B4:91:09
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EC6063343723FDDC4C7910
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d23a82c-1fad-3518-bb17-dc0ac459dc14.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.240.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:60:63:34:37:23:fd:dc:4c:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6a0ab8dd-7bb9-4cb3-8bdf-15f213e80927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:82:57:78:19:2b:df:7b:92:68:b4:1e:72:
d5:56:9d:37:fd:eb:12:e4:6a:7e:ba:ac:53:aa:07:
68:00:af:e8:ab:28:26:94:d2:91:d8:f6:f5:5c:ba:
b8:20:8d:02:a5:b4:31:79:db:e2:cd:5b:df:32:92:
e9:e0:22:a3:12:db:07:fb:a6:fa:0f:16:aa:a5:30:
42:4a:ca:95:1f:94:26:24:ce:e5:1d:d7:74:03:1e:
db:13:db:d3:88:1a:c6:c4:43:bd:5f:76:14:8f:0b:
ee:aa:67:30:dc:40:c2:96:38:42:41:f5:df:c6:ce:
b4:1c:0b:d2:cb:e6:fb:46:5a:60:08:5b:38:52:f9:
b3:b3:42:04:67:02:c9:24:6e:d2:8c:30:61:99:66:
52:dc:46:62:35:1e:11:fe:65:05:a8:1b:a0:2f:58:
41:04:f7:ad:4f:48:52:42:e9:32:6d:12:7f:69:05:
39:fd:8f:29:a8:51:a3:c4:3d:dd:dd:80:b8:d7:0e:
d3:c9:8c:64:6c:c9:9d:fe:7f:7e:c8:3d:c4:8f:dd:
f0:fa:47:00:a9:c3:0a:af:05:f0:57:9f:88:17:2d:
6a:54:c1:00:07:5d:9c:17:ae:3a:68:57:81:22:c4:
69:f1:f9:4e:af:2b:5b:e0:20:d8:bf:db:eb:5a:a8:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:63:24:15:24:9F:B8:36:ED:43:6D:6E:FA:1B:2E:91:B4:91:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d23a82c-1fad-3518-bb17-dc0ac459dc14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.240.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ef:50:84:ac:c1:fa:c9:45:71:0a:c2:16:9b:84:35:8b:fc:
1d:e7:f2:19:0b:5a:af:39:c8:9c:e3:78:5f:67:b6:9b:62:54:
24:13:47:a0:72:a5:ea:07:8a:83:f4:07:9a:55:de:12:4f:34:
fa:cd:4b:8f:14:ca:b1:64:d1:5d:b4:59:75:d2:f6:6b:bb:14:
d6:90:cb:62:73:1c:7d:3e:6e:0e:12:85:56:06:9e:44:aa:17:
dd:a7:18:a1:38:1f:dd:06:73:0d:c6:b0:ff:b3:c9:96:d1:5b:
e1:ce:e3:45:df:79:ca:45:87:19:db:9b:18:f8:67:d6:35:31:
a7:fe:54:12:d8:74:aa:54:9c:48:99:70:b7:14:54:0e:8d:a7:
94:8b:79:fc:f9:fc:71:a6:c1:9e:92:14:db:e1:e9:b9:d5:86:
6e:4d:8e:04:76:83:f4:2d:fd:43:13:c8:1c:f4:1b:c5:51:fc:
63:ba:d9:27:4f:5a:e3:fa:fc:6c:71:d1:95:4f:6e:5b:10:20:
43:57:0a:04:66:8b:73:0f:13:29:84:5d:e8:82:ec:33:bc:ba:
6d:b8:a8:16:52:c3:b3:f1:13:20:96:11:68:1b:9d:30:7b:55:
14:a5:85:5b:86:7b:4d:de:ab:c5:d8:a0:f8:f9:e8:07:98:9b:
3b:6d:f0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:40:33 2025 by rpki-client