Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33d3fa97-9757-3289-8d24-c687d4e13abf.roa
File: 33d3fa97-9757-3289-8d24-c687d4e13abf.roa (raw, json)
Hash identifier: VihncZlpgSlySBZLZTJHeTS/NCTJ8UOdmRjOWgs4s04=
Subject key identifier: 36:EB:35:05:AC:0B:85:9A:9A:7A:5D:83:A8:26:95:70:61:29:D5:89
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EF8CF471080091510C7C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33d3fa97-9757-3289-8d24-c687d4e13abf.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.195.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:8c:f4:71:08:00:91:51:0c:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7fc91084-8b1f-48e0-9274-f64b0310d647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:0a:77:bb:90:32:27:b2:17:f6:12:cb:5f:
15:c5:29:27:1d:f4:b5:25:45:8e:c0:9d:0d:d6:3a:
b3:89:64:d7:96:3a:40:4c:a9:d6:b6:27:27:c9:e5:
3d:9b:b3:30:ab:32:e6:ee:4a:e4:88:05:43:b9:7c:
b7:57:33:8c:c1:b4:0e:15:86:96:05:89:38:8d:9f:
29:2c:00:71:d4:6d:9a:f6:4a:0c:0e:64:b0:03:67:
4f:0a:7f:41:2f:5b:33:a4:b7:cf:da:55:78:00:1e:
36:88:2c:a7:99:66:b4:61:3e:e8:3b:81:7c:b1:26:
cf:0b:53:24:86:11:41:b7:8d:fc:cc:1f:2b:76:86:
48:a7:0c:4c:dd:76:8d:2a:bd:1b:69:b9:c1:80:3f:
58:59:3d:47:14:e7:87:e4:f2:c2:65:04:d4:cb:5e:
9f:2d:fc:0e:f9:d5:ab:10:0b:95:fd:91:e5:b1:00:
68:10:96:99:be:32:7e:03:f4:dc:bc:1b:ad:00:1c:
f5:6c:d7:86:bb:95:5a:47:e1:3a:82:df:40:ed:a4:
f1:87:53:b5:47:dd:49:bf:5c:0d:d7:80:43:96:cd:
d2:d2:d8:0f:7b:bb:0a:37:11:38:07:07:d5:d3:72:
0a:a2:fe:2b:90:6b:ff:c1:cc:98:7b:ba:01:8f:41:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:35:05:AC:0B:85:9A:9A:7A:5D:83:A8:26:95:70:61:29:D5:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33d3fa97-9757-3289-8d24-c687d4e13abf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.195.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:dd:18:e3:4d:d2:52:58:0d:c6:f3:fd:53:ed:7d:6f:36:76:
ce:2a:a3:2e:44:6e:b1:98:46:df:85:34:e4:09:7c:4b:36:18:
36:ba:dc:a1:10:3a:65:63:36:82:b0:0a:9d:18:ee:5e:a1:9d:
a1:b2:8a:6d:a8:c7:bb:92:a4:7c:4f:3e:b5:5a:63:9f:59:af:
0b:d1:2d:af:01:9f:e5:33:db:2d:08:7a:39:ba:fc:32:1b:10:
b6:87:42:75:c9:84:bb:d7:9b:34:fa:dd:d1:c2:50:9e:97:fd:
8d:02:e4:d5:ee:fd:6c:37:7c:03:cc:46:60:55:ab:02:bb:ad:
d4:b5:7e:05:9e:a5:cd:7c:bf:d2:47:c0:ca:9d:20:76:2e:44:
db:c9:a6:73:0e:2c:f0:69:c9:f4:c2:77:3e:8b:52:bc:7f:c1:
5f:39:80:86:30:2a:d4:e3:aa:fb:3b:14:07:45:99:00:bf:a4:
2c:36:10:4f:14:89:57:3a:a7:4d:52:69:fe:67:5d:6e:2c:9d:
6b:70:ce:a2:19:40:cc:e4:cd:08:7b:e0:1e:80:07:d2:17:b6:
f8:c2:31:73:c6:64:20:90:70:c5:68:e6:f0:ae:06:95:82:6c:
46:d2:7b:af:8e:ce:75:c3:11:c9:49:bd:85:fb:cf:3d:17:2a:
5d:ff:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:48:46 2025 by rpki-client