Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/311dd206-3d41-366d-9e8b-5602d54cb4ce.roa
File: 311dd206-3d41-366d-9e8b-5602d54cb4ce.roa (raw, json)
Hash identifier: dQtGkkrubDHKbrvsxQsqEMcc4isWIzaDY+Zn9nM1JA4=
Subject key identifier: 2E:0D:2A:2F:21:6D:D5:EC:BA:F9:67:44:8D:68:14:76:0F:0B:9A:35
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A075702EEF50B2FCB14DCB0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/311dd206-3d41-366d-9e8b-5602d54cb4ce.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.238.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:57:02:ee:f5:0b:2f:cb:14:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0503450b-fcca-4f7e-b417-44896159657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:c3:18:26:5d:74:0b:00:e2:01:f7:b4:7f:
f1:c1:70:e7:cf:23:ab:36:e9:59:ae:3e:ce:6a:1b:
b7:1c:53:08:95:2a:01:ef:31:ea:fb:38:46:2e:10:
64:12:10:40:03:11:83:3b:fa:f1:3e:cd:93:c7:70:
29:be:de:63:fc:f3:76:ef:c9:96:c0:fb:a1:f5:43:
cd:16:2b:7e:e2:94:62:69:eb:6c:7e:74:d7:a5:7b:
db:34:c1:b2:89:d6:6d:ba:f8:9a:83:b6:8d:68:71:
a5:55:20:16:f9:e7:d7:e8:e0:fd:1a:2b:aa:8e:2d:
bc:28:5a:5c:3e:5f:4e:44:2c:07:9d:f7:18:1d:3a:
50:41:a6:2a:20:1f:b5:1f:84:93:1e:4a:e4:cb:b9:
c2:3f:77:30:ca:96:07:ea:93:a6:ea:5e:10:25:53:
8d:b8:2f:d8:62:40:02:fa:f7:54:c5:08:43:b7:b7:
42:dd:70:c5:c2:bf:1e:5a:82:41:cb:a3:dc:32:04:
f4:a6:84:68:d9:21:be:29:51:20:ac:a5:6e:96:b4:
f3:e1:be:15:08:fa:34:53:d4:f4:2b:32:52:d6:8d:
41:ff:3d:a8:14:6b:91:a6:52:f5:54:7d:01:b5:17:
3a:a6:31:3e:32:b6:4e:98:c6:e6:6a:b1:b5:2b:66:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0D:2A:2F:21:6D:D5:EC:BA:F9:67:44:8D:68:14:76:0F:0B:9A:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/311dd206-3d41-366d-9e8b-5602d54cb4ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:dd:1c:43:30:3a:0f:fb:6d:7e:db:b3:bd:5e:b4:3e:d4:c1:
b5:87:79:c4:bc:e2:e8:11:1d:2f:46:51:46:45:10:30:06:c6:
c1:4f:04:59:a9:a8:92:f4:84:e9:3c:cb:9c:15:f1:43:79:56:
f6:68:9a:db:07:07:98:9e:a9:68:49:58:e8:2f:d5:60:45:3a:
d8:ec:c1:f8:58:65:fc:ac:eb:74:cb:9e:7a:9e:72:6c:31:de:
b2:95:4b:0c:58:00:91:e4:29:01:f3:c4:f1:02:a8:af:f3:f7:
75:24:99:47:41:d7:9d:5e:e4:8c:be:09:6a:90:d7:63:e5:54:
37:64:8b:5a:78:28:c9:1c:8d:f6:6b:f9:6b:a0:45:08:96:57:
9d:87:d3:fd:5c:74:09:a1:29:7d:d6:36:5a:92:1f:20:2d:7d:
8a:50:3a:61:63:f7:8d:44:90:a4:08:78:71:06:e4:28:ee:f1:
19:c3:0a:cb:39:9f:4d:67:9a:29:f3:cd:ac:d4:b3:3f:47:2c:
af:2a:16:bc:45:d9:71:f8:2d:71:9c:80:64:c8:97:51:8e:1f:
6f:24:3a:b3:b5:6e:ca:06:fe:f0:69:76:af:38:75:87:d5:eb:
d4:5d:0e:2e:95:33:8a:08:fc:1c:d3:e5:c4:94:e1:52:cc:4c:
57:51:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:18:25 2025 by rpki-client