Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32cecd60-a43d-3357-8916-41c5c0812c19.roa
File: 32cecd60-a43d-3357-8916-41c5c0812c19.roa (raw, json)
Hash identifier: AmpI957Q3CjVP0svaQph/TLbKMyz9nSo7ggbMFFcRr4=
Subject key identifier: A6:42:46:3B:CA:26:44:BE:5F:5D:AA:AD:63:C0:D0:6B:EE:12:E4:36
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EDB61393D1FE4CD3D6D000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32cecd60-a43d-3357-8916-41c5c0812c19.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.228.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ed:b6:13:93:d1:fe:4c:d3:d6:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a0619584-665a-4ab7-ab89-e970aee719b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:4b:c7:57:20:eb:a9:7e:43:d8:b5:a8:2b:
4b:13:83:65:32:03:12:d6:81:a5:ee:33:60:91:e1:
f9:01:bc:a9:ac:5a:11:42:43:a5:11:aa:80:02:58:
bf:7d:ac:c4:9c:9f:c8:4c:0e:5e:33:7b:fd:b9:31:
d6:a7:1b:1a:cf:82:6b:38:6b:89:47:8f:ec:73:42:
95:9d:4e:a0:7a:d8:60:7c:cc:f2:b4:65:91:4d:b8:
8d:79:54:95:fb:f9:ee:fe:61:9f:c7:03:c6:89:65:
22:cd:27:30:21:d2:4f:d7:18:ce:d5:7e:41:2c:74:
e1:ea:92:3c:52:39:3e:27:03:b7:22:8b:45:27:99:
9a:02:8c:65:e4:5c:fd:eb:b1:a6:48:88:8c:3c:d0:
79:ec:e6:9a:88:9d:38:d2:28:02:a1:a3:42:33:f2:
7b:e5:20:fe:6c:61:78:4a:65:24:d4:53:03:28:66:
b6:22:9f:33:73:e3:93:82:01:fa:d7:98:31:81:56:
52:3a:09:d3:5c:ca:a0:cb:dd:ac:c6:db:59:a0:ba:
b3:a4:0d:58:8c:90:69:a6:4b:35:68:96:b6:1f:d9:
5e:83:ed:8f:12:f3:26:d7:db:4b:57:ce:cd:26:9e:
42:25:37:f1:3c:43:fe:9a:42:e5:bd:76:94:23:df:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:42:46:3B:CA:26:44:BE:5F:5D:AA:AD:63:C0:D0:6B:EE:12:E4:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32cecd60-a43d-3357-8916-41c5c0812c19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.228.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:86:8c:a9:e0:6f:32:32:08:4a:80:0e:e9:ef:48:a6:39:19:
1b:7f:45:bd:b1:4d:ad:80:ce:30:7f:7e:d7:49:20:73:43:8b:
fd:f9:a8:bb:17:bf:ce:40:2a:fb:d8:0b:b8:7a:9f:35:b3:54:
e3:39:38:57:d9:72:23:73:be:c5:3f:71:d8:de:47:b4:21:86:
cd:3b:d8:93:48:79:e7:97:e1:dc:e3:40:55:04:f6:9d:47:32:
50:f9:5c:04:dd:5d:a7:81:e6:ec:30:6a:8e:77:59:11:cb:80:
b7:28:18:30:91:8d:f0:b0:52:b4:59:24:80:d1:20:5b:7c:33:
01:c2:b3:0e:b7:92:2c:b4:aa:0f:4a:34:56:bf:37:62:a6:47:
97:a9:9b:7a:4f:dd:bb:fc:e3:27:01:c4:26:6a:4c:39:36:0e:
68:27:a1:bc:3c:a2:70:7d:b9:38:ee:8d:6f:b4:d4:7b:03:3a:
c3:06:9d:a1:1f:5b:90:57:58:c4:e5:55:95:59:1a:fb:1b:61:
1a:49:f5:c1:61:12:8c:2e:35:fa:0b:fd:87:e6:fc:15:d0:ab:
33:6b:fb:98:5c:62:47:06:0e:9e:ac:37:a8:c7:87:d7:46:3a:
fd:87:89:bf:f9:92:c6:ac:04:4f:02:86:08:10:08:61:25:fe:
58:4d:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:14:12 2025 by rpki-client