Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333619bc-5f20-3fb5-b753-c954e03b90ed.roa
File: 333619bc-5f20-3fb5-b753-c954e03b90ed.roa (raw, json)
Hash identifier: vraFla/pk01vz/jkSzyhGaC4KF4diFhG6pa1Z5GSOF4=
Subject key identifier: 48:F3:EC:CE:95:8C:D0:16:A5:6B:17:4E:4A:5E:C9:68:62:22:B7:F1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F22A577666C4CA50FA9F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333619bc-5f20-3fb5-b753-c954e03b90ed.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.188.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f2:2a:57:76:66:c4:ca:50:fa:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c0dc13aa-86bd-4594-bfbc-11074eb3189d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:13:e9:fe:ec:ad:33:7e:7c:eb:fe:a8:2a:
b0:93:66:08:31:3e:16:82:d9:e7:6e:ba:e5:52:04:
a6:46:b4:cf:a3:5f:20:c3:90:81:ef:8e:db:99:5a:
81:c7:76:42:94:dd:0b:06:f4:a3:04:a5:4b:d3:28:
2c:c1:ef:dd:12:34:46:c6:1b:b3:58:37:c6:3c:96:
d8:86:eb:d3:d9:9e:bb:6e:5d:c7:56:85:72:97:34:
8f:6c:bf:58:9c:04:08:06:ef:ef:60:34:dd:8a:6b:
e6:8a:75:7b:58:68:85:6f:c7:05:19:68:a3:6f:b8:
31:2b:38:89:42:d3:e9:60:08:90:62:bd:5c:ae:39:
0d:14:11:96:27:5b:90:a3:e3:d8:21:3b:1a:dd:6f:
20:82:63:a6:0e:cc:46:99:64:f5:86:ad:31:fa:ff:
a9:df:d0:44:5a:9d:ee:c8:01:55:e6:f9:55:5c:16:
2e:f8:26:3f:7a:0f:9f:a5:86:e7:13:ae:35:9d:10:
74:80:aa:37:73:ae:34:7e:6f:63:f5:df:02:b8:27:
c8:dd:96:66:c5:4b:62:a5:61:52:d0:43:88:87:a3:
b1:cb:cf:2b:b7:23:96:f5:aa:e2:96:74:80:f2:5d:
f2:4e:d6:47:96:0a:54:d1:08:8f:07:ab:06:41:17:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F3:EC:CE:95:8C:D0:16:A5:6B:17:4E:4A:5E:C9:68:62:22:B7:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333619bc-5f20-3fb5-b753-c954e03b90ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:16:a3:59:2e:f7:7a:e0:94:a5:4c:cb:e6:0b:29:f2:27:06:
16:39:0f:cc:de:75:63:4d:ab:5b:bc:ca:21:0c:a7:64:94:4f:
4f:d1:ac:16:da:9b:43:b8:85:56:f0:05:1f:7a:4e:da:df:a6:
9e:c8:57:a9:fd:a1:55:b8:27:fe:d8:c2:aa:90:11:46:ee:ec:
41:89:98:a5:a8:ec:a5:59:ce:4e:26:d6:0d:14:6f:d8:c9:bb:
24:69:b1:af:c4:00:b3:3a:d5:8b:df:c2:4e:52:d0:b2:2a:95:
33:67:2e:17:11:56:aa:4f:56:a3:0b:0a:b8:1e:28:3b:ac:f1:
ef:18:fc:ce:c1:d3:b4:2c:5f:5f:ac:85:61:66:77:af:a9:5a:
57:87:fb:af:47:a3:bf:c2:2d:39:ca:d0:48:54:73:10:0b:b7:
59:cc:65:e7:69:2e:6d:80:85:0e:82:45:2d:a9:7a:62:ac:86:
1b:73:6e:76:9e:99:ce:84:a8:6c:f2:bc:8d:c0:f5:08:c7:2a:
b2:38:70:a3:11:be:a3:0e:47:fb:67:ad:b1:ba:a3:72:6f:74:
bd:0f:bc:77:e2:f2:32:36:ac:46:26:51:ce:99:32:e9:8b:b0:
4e:bc:d2:df:6a:7e:a9:78:45:ac:85:5c:42:16:25:12:e5:0e:
95:71:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:40:56 2025 by rpki-client