Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d38f803-7e54-3ac9-b679-9db6288cbcda.roa
File: 2d38f803-7e54-3ac9-b679-9db6288cbcda.roa (raw, json)
Hash identifier: DHQmA4+HoGYQMRR246G+UEaj8qaZvhNAyNAp9t+OeR4=
Subject key identifier: A2:6A:16:46:9F:AB:2F:17:80:98:48:5C:9F:DD:EA:42:76:7A:C6:73
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1CCD5A27675639B4155B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d38f803-7e54-3ac9-b679-9db6288cbcda.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.204.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1c:cd:5a:27:67:56:39:b4:15:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a00fc927-a312-46e3-a956-62d7cb563182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:dd:5a:01:c0:15:57:ed:c1:74:ad:97:bb:
8c:84:22:4e:1b:ac:cb:84:d1:66:be:44:3a:d2:33:
42:cd:6d:78:73:fb:98:19:73:70:58:f5:09:d7:b3:
82:85:e3:29:10:c5:51:24:82:4c:42:20:d1:a7:0b:
05:65:b0:35:90:71:8f:5c:28:54:ef:28:b2:c1:a4:
64:df:21:e2:6b:4d:6b:d0:bd:e9:4b:21:0d:09:5a:
b9:6a:92:21:f2:b0:a8:24:9a:52:d9:6e:65:02:ff:
33:98:1f:43:6c:cc:c7:c6:6a:1a:9e:2d:ee:91:39:
f5:0e:bd:69:f2:3c:d7:37:d9:7d:39:3f:78:76:c6:
dd:0d:07:4b:ba:df:65:53:05:50:08:1a:32:00:5c:
d4:3c:52:f8:d2:08:f5:89:cc:c4:1a:81:d6:6c:fe:
c8:04:be:ab:34:26:23:54:d7:94:7a:c3:e8:10:31:
4f:8d:89:b1:6e:36:1e:b9:0f:68:0e:56:2e:e2:45:
98:07:28:4c:e4:a9:47:3d:f0:a9:5e:10:bf:e6:e6:
45:d2:a0:e6:6b:c2:0d:71:e1:7c:d6:5d:44:d2:a6:
d1:13:21:fb:5d:6f:39:42:63:0c:8e:38:3f:b1:12:
91:ed:2e:8a:99:35:39:bc:ca:ee:4c:5b:ee:7f:61:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6A:16:46:9F:AB:2F:17:80:98:48:5C:9F:DD:EA:42:76:7A:C6:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d38f803-7e54-3ac9-b679-9db6288cbcda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:46:1d:b8:80:73:48:10:a2:89:cb:fa:27:7b:9f:db:c8:c2:
b3:b9:ac:57:14:54:6e:87:3d:9b:3e:88:63:03:ef:e5:c4:29:
90:b5:07:a8:c6:38:d2:8d:55:d7:4e:d1:4d:5a:a0:89:40:a3:
fc:18:18:41:c1:14:28:ba:fb:2f:54:2b:06:82:da:c6:1c:29:
75:41:8d:2d:04:d7:f2:3c:2a:fe:42:2d:c8:28:1c:fd:b5:f8:
ff:7a:31:aa:e9:b5:fb:5f:9b:5a:5c:17:ee:28:54:ef:25:37:
f4:89:7b:7f:77:ef:d6:6a:f8:a8:13:5e:9c:dc:5f:ad:6b:77:
53:85:a3:d6:14:86:6a:6a:93:3b:5f:15:bf:f5:c7:11:b2:89:
0e:af:25:f6:cc:49:e1:5b:d1:dc:90:c0:77:16:a2:05:eb:51:
3c:03:b3:9c:b7:e2:73:05:1b:31:ef:df:5c:d7:a9:dc:bc:0d:
07:52:a1:28:e7:38:fc:80:ef:ae:89:a4:bf:c7:57:0d:0b:2e:
9d:6f:c0:ec:ec:46:3f:7a:80:b7:d1:f7:46:dd:e9:dc:d7:ec:
f0:a9:8e:d2:a9:93:0a:cd:4e:c1:ea:53:8e:ca:e4:d9:67:42:
94:ec:5a:48:cf:66:26:f4:2c:c3:14:df:8c:a6:75:e8:ff:d5:
ad:33:78:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:53:50 2025 by rpki-client