Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/227a9f25-c72f-3761-b19a-5774178b9602.roa
File: 227a9f25-c72f-3761-b19a-5774178b9602.roa (raw, json)
Hash identifier: qVBkFf28/MFyom02MQYoJZ1yI703NsJWO6VMlCL3JT4=
Subject key identifier: 00:52:BA:3E:4D:D0:B5:C0:83:C6:5B:F8:2C:AD:AE:4E:FA:91:E9:89
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0A8C269228E24D79C94180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/227a9f25-c72f-3761-b19a-5774178b9602.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.204.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:8c:26:92:28:e2:4d:79:c9:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9001b9bc-441a-4e67-9a32-eb3139b1c322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:c0:ab:32:36:f5:15:22:56:13:4c:7b:f6:
84:57:ec:ef:42:a6:aa:1e:41:61:f8:26:37:cf:0d:
6d:f0:fc:6e:fa:0f:b3:65:a6:e5:04:5d:cf:39:4d:
5a:01:81:13:45:9a:b6:6d:99:71:c8:8d:c8:3d:3d:
ee:1c:87:ef:0b:96:fa:63:a5:8a:5c:3b:f2:92:4a:
0b:23:45:1b:62:25:18:cd:ff:fe:f3:05:fb:8f:41:
44:b3:3c:78:39:a3:c7:57:ff:17:4d:78:5e:b4:64:
fb:8c:cd:44:00:62:75:4d:8f:af:8e:dc:8b:e6:1f:
79:0f:e9:6e:94:b7:02:d3:32:a8:ee:48:f2:df:ae:
ad:69:7b:8a:07:1c:3c:28:0f:ad:c9:06:e7:bd:4e:
6c:d1:d5:73:84:c6:cd:0b:4f:95:3b:b7:e8:23:aa:
a8:a1:c0:29:89:96:26:a4:2a:e6:8a:09:b5:67:a0:
fe:34:7c:e0:7a:a6:9e:d0:eb:3a:a1:6c:90:88:31:
cf:89:84:bd:5d:cc:17:27:2f:62:d9:37:79:91:1e:
6d:03:04:29:76:d7:b1:bc:51:92:15:a4:bc:23:62:
e1:cb:95:6b:29:ad:d6:19:26:42:cb:c5:27:47:a8:
58:c6:ad:c8:86:a9:ef:dc:98:4c:e4:62:22:89:91:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:52:BA:3E:4D:D0:B5:C0:83:C6:5B:F8:2C:AD:AE:4E:FA:91:E9:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/227a9f25-c72f-3761-b19a-5774178b9602.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:51:3f:d6:b0:4a:0d:e9:58:83:ac:df:f4:b8:f3:95:7f:14:
0c:92:65:01:8c:3c:58:11:8e:2b:dd:38:20:37:c2:5e:ca:42:
9f:f3:57:4a:ee:63:22:b8:33:e1:ba:cf:58:e1:b1:59:fe:bb:
cd:a6:0f:0c:5a:d0:ab:15:ca:f6:ae:ba:f6:b5:9b:db:e9:c5:
b6:88:50:eb:75:33:4b:16:e6:3a:4c:c9:2d:15:4f:dd:ac:6d:
ce:d0:53:9a:d2:fd:56:5e:5b:4a:be:6a:20:e6:21:e2:d3:0b:
78:98:8c:7d:2a:45:3e:df:0f:2c:f6:02:ed:25:c0:b0:ab:fe:
fd:46:21:5f:c4:0c:dd:77:ef:d5:76:64:8d:d5:e6:2f:27:9e:
c7:94:bb:88:4a:af:da:b3:52:d2:4c:22:40:9d:ab:16:3c:90:
7b:00:4d:a6:7d:b0:78:e3:f9:aa:9d:d9:23:86:29:76:83:85:
d6:03:7a:f8:b5:9e:8c:e2:51:2d:87:ec:86:b0:34:33:21:49:
fe:d8:d7:33:42:ce:37:b2:9a:54:ea:21:0e:ee:24:9b:db:86:
d0:ad:f9:3e:d4:58:88:0c:f3:67:65:8a:b1:6c:b6:b4:bb:f5:
61:db:fc:b5:cc:22:7b:c7:9b:0b:ba:ff:74:1b:6d:08:7c:33:
28:bd:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:35:12 2025 by rpki-client