Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f33e494-8735-3c39-9140-29140f314895.roa
File: 1f33e494-8735-3c39-9140-29140f314895.roa (raw, json)
Hash identifier: sfBCohbNDW1Dr1YQXIFB9LwcFk0uG8QXBmUwRTjfQ5o=
Subject key identifier: E4:11:26:07:E7:63:A0:41:6B:CC:66:C2:12:01:8B:87:A9:87:89:2C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A12AFC7A2C0BA9C02AB6100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f33e494-8735-3c39-9140-29140f314895.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:af:c7:a2:c0:ba:9c:02:ab:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8479d1de-db56-4d67-ae9d-42f7f04feba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:76:8b:5c:e6:3b:4a:8f:cc:3e:66:c7:68:
d5:59:59:41:b0:70:eb:02:b0:ff:74:44:f4:6f:e9:
d7:6a:8a:8a:4b:f8:92:5d:52:e4:e4:a0:2b:98:0a:
6b:c5:8c:49:81:08:cb:eb:bb:13:55:aa:0a:83:01:
4f:f5:16:03:61:bd:fc:c3:9e:ff:74:8d:81:6f:10:
5d:21:36:89:0f:30:91:57:11:cc:d0:ce:0f:6e:2b:
db:33:da:5d:dd:fc:95:57:d6:26:d6:0c:76:9e:b9:
5e:90:8c:7f:c0:4b:47:64:09:95:b8:2d:a4:7f:95:
05:50:45:0c:02:19:0e:e2:b1:5b:2e:80:ff:9c:67:
22:5b:37:15:c7:9e:12:89:f7:9b:ab:e2:83:45:0e:
f5:5a:c2:85:c2:54:86:5d:77:77:16:ff:33:ab:5a:
6b:37:8f:3a:31:78:82:57:e8:20:15:76:3d:0f:66:
55:61:85:e6:a5:23:25:63:dd:ab:93:da:f5:d0:10:
eb:d2:05:7f:a9:73:00:0c:f8:5b:c6:ba:65:a3:df:
df:d2:00:d1:0b:7c:44:04:7c:80:27:95:d5:92:a6:
ac:7b:3a:0e:95:39:47:bc:3a:a1:b0:ea:42:b2:7c:
9e:8a:78:7f:b9:18:53:6b:74:0d:62:c4:0d:9b:2e:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:11:26:07:E7:63:A0:41:6B:CC:66:C2:12:01:8B:87:A9:87:89:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f33e494-8735-3c39-9140-29140f314895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:6b:36:63:32:c5:81:f3:e5:45:0a:26:c2:cd:03:a6:df:0c:
f6:eb:fa:3f:43:6d:f1:de:77:d5:e8:38:07:c7:eb:e2:e3:39:
86:5f:26:4b:dd:fa:0f:07:f5:58:78:60:7a:0a:f3:03:83:66:
d3:18:c8:ab:ea:0e:2b:7e:7f:94:df:81:61:20:b8:fb:19:ff:
e9:53:20:0c:7f:b3:46:88:d3:40:f3:f1:30:ad:61:40:16:45:
0f:cb:74:02:b5:18:5c:68:53:e1:c1:35:b5:9d:0d:2c:47:69:
04:38:ab:e6:15:73:1e:33:14:b4:1e:44:b0:0d:7c:40:67:d8:
d6:3d:e1:94:a9:57:59:3e:db:23:22:79:3c:03:a7:4d:95:86:
bc:71:9a:64:06:f9:9d:66:29:ec:e9:bb:10:12:da:f8:89:44:
8b:11:a0:d3:d6:21:22:d7:47:16:ac:26:e0:2b:a3:69:8d:3c:
ee:d5:a5:83:a0:37:f5:b9:4a:b8:42:31:0e:0e:8d:cc:54:71:
18:7b:90:71:ef:c8:10:6a:75:93:6a:2d:02:86:4b:78:0c:db:
00:69:ad:00:fa:04:bd:2f:f0:c3:97:aa:b5:0d:28:df:f6:6c:
27:51:b7:4a:f2:67:21:67:ff:87:01:60:c4:1e:62:38:40:30:
da:0a:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:13:51 2025 by rpki-client