Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24e9d482-1c8f-34d3-b47f-191d74c1224d.roa
File: 24e9d482-1c8f-34d3-b47f-191d74c1224d.roa (raw, json)
Hash identifier: EYHxC2s1JeakiAjEGTdyaN2gW/NZD/kEcFX4nfh9EBA=
Subject key identifier: F9:9C:0A:08:20:7D:08:A6:4C:65:44:24:BE:3C:EC:A1:33:86:71:31
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A13402B561A9AF0D1EFE380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24e9d482-1c8f-34d3-b47f-191d74c1224d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.186.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:40:2b:56:1a:9a:f0:d1:ef:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9e79d3ae-8e12-4c66-985d-b8cd807aa9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:41:1c:4c:80:cc:48:71:23:89:bb:6f:ee:
2c:bf:44:18:90:47:c5:6b:a1:33:0a:4b:cf:dc:44:
42:6f:71:e0:3e:8b:1e:cb:1e:74:2a:4b:fa:7e:c8:
87:90:40:58:0a:19:b4:3b:53:82:28:a7:3e:4e:0a:
bf:9e:79:3c:03:6e:e1:c3:83:87:54:f2:51:f2:ef:
ed:6d:11:40:36:51:1e:9c:c6:b2:de:10:7d:73:f0:
28:d5:91:92:bb:8e:5a:7b:10:1c:55:21:79:e4:9a:
0d:33:b4:d0:0f:b0:91:24:09:25:53:19:76:33:f4:
e5:4e:97:fa:06:a2:7c:33:4f:5c:19:ec:44:42:ca:
4f:40:55:6c:5c:af:78:a8:6a:7d:02:76:b9:9e:f5:
8e:e3:9a:e9:20:5b:97:7c:f4:5c:29:c5:56:54:b8:
05:82:3e:02:08:22:98:39:0b:0d:d7:2d:c4:89:1d:
98:a8:8d:e4:59:a5:74:04:be:29:c1:74:a2:79:f3:
65:a3:f0:71:a1:5d:db:16:e7:28:a0:65:71:0c:b9:
df:84:59:5a:a5:94:6a:81:c3:30:9c:58:ec:c5:26:
07:01:a2:ca:93:27:e6:81:a6:06:77:5d:d0:62:4c:
2b:9f:e5:3e:bb:4c:60:20:b3:a4:7a:01:d5:d6:cd:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9C:0A:08:20:7D:08:A6:4C:65:44:24:BE:3C:EC:A1:33:86:71:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24e9d482-1c8f-34d3-b47f-191d74c1224d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.186.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:78:55:06:aa:9b:ed:72:fa:83:a4:01:83:93:aa:c5:89:08:
f9:20:81:76:e4:d1:5a:15:c9:05:4d:14:ea:8b:f2:62:3c:25:
4e:ed:bf:47:34:ad:e5:96:17:32:7b:52:6d:8d:a9:d6:69:b0:
c3:18:1f:b2:52:d0:5b:c2:15:db:22:94:01:31:e6:4e:e6:d6:
03:11:b2:68:b2:d1:01:38:81:7a:c4:3e:5c:b3:d2:5d:85:df:
dd:12:67:26:eb:60:02:a7:ee:5e:25:d8:25:6a:aa:0d:a7:0e:
78:5d:15:2a:b6:d0:a2:3a:ff:88:77:23:09:91:eb:a2:57:69:
f1:dd:59:f0:78:16:ff:20:38:ef:c6:7c:a1:d5:79:2e:70:1e:
83:52:2f:6c:80:8d:45:0c:dc:ce:b4:ab:f0:bc:ab:21:8a:ee:
31:27:b2:f6:22:65:1c:89:c2:e9:00:bf:76:f7:cb:84:b5:ca:
e0:9a:d7:ce:dc:38:2f:be:e0:dd:9b:61:30:7b:69:02:f5:f1:
2d:fc:a0:c6:0b:e8:b5:ee:19:1e:db:ab:71:1a:ef:87:0d:a7:
cb:3c:c7:89:c6:fc:51:60:88:d2:f2:e7:dd:b7:93:95:0d:d3:
4c:2f:95:b7:b4:89:a0:47:a4:22:33:21:9a:70:d5:94:57:b8:
06:28:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:21:06 2025 by rpki-client