Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3622bfaa-2931-3182-84e1-6608aa01d210.roa
File: 3622bfaa-2931-3182-84e1-6608aa01d210.roa (raw, json)
Hash identifier: QpcazQe0+yn2gurWj10XXfo8/OCY3ZAA1uqkpALHvB8=
Subject key identifier: DE:4D:80:BD:79:9F:00:0E:73:D8:BE:1E:03:6B:DE:45:5F:04:31:64
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5B0AF0E967341666CF40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3622bfaa-2931-3182-84e1-6608aa01d210.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.194.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5b:0a:f0:e9:67:34:16:66:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=d7f64c56-9a06-4092-8aa9-13642de09da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:f9:90:a5:92:17:f3:9b:0a:30:66:64:c9:
ff:f4:d7:f2:09:90:be:bf:0d:65:3b:72:6e:0b:b1:
5a:10:cf:2a:f6:92:18:6c:9f:7f:9b:73:e1:92:27:
dc:81:3f:4a:91:4a:1e:c5:c4:82:89:61:65:69:10:
dd:ca:29:11:50:ba:29:6f:1a:7b:87:04:8c:ec:b9:
41:4f:44:07:e3:28:eb:74:ed:55:fb:66:4d:67:15:
22:3d:df:41:d1:04:96:d8:a1:01:1c:35:f9:cb:55:
0a:48:d7:9b:1d:c9:e8:ba:c4:0e:9a:54:f7:da:b1:
97:f2:47:c5:dd:f6:71:b3:59:67:f9:1f:98:f6:a0:
69:2b:26:77:e5:06:bc:72:b8:0f:2c:b6:4e:13:ba:
ea:7d:2a:65:74:af:81:c0:8d:4e:dd:c7:c9:9a:bb:
d8:9b:2b:96:1c:b9:8a:c0:a8:10:68:cc:f5:62:9a:
09:12:b9:d9:34:8b:fa:45:bc:5e:cc:66:87:e9:0e:
27:7d:fd:d1:7f:13:87:9d:65:00:af:57:4f:a9:20:
75:6e:0d:9a:9a:ce:14:9a:f7:37:cc:64:7e:43:4d:
0a:03:fe:22:2e:74:8b:d0:f8:74:46:f0:34:c3:2a:
a0:0c:42:18:e6:08:15:76:36:ee:0f:89:3c:92:28:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:80:BD:79:9F:00:0E:73:D8:BE:1E:03:6B:DE:45:5F:04:31:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3622bfaa-2931-3182-84e1-6608aa01d210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.194.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:0b:57:42:a7:e9:e7:36:22:0a:fc:4e:ca:02:c4:49:e1:ca:
56:69:d0:81:f8:40:57:7f:98:b2:1e:4d:88:c4:50:31:df:b3:
85:ef:87:e0:8d:4f:6d:0c:8f:a0:6a:fc:17:9c:2b:a0:ac:4b:
ad:ab:56:89:4f:6e:68:52:a1:f3:2e:c0:96:fa:7b:d0:a6:a8:
90:7d:c2:22:cb:a5:d9:d8:be:9b:1f:e5:00:18:18:1d:e0:7d:
21:22:96:04:a4:44:dd:ad:4a:fc:fe:7c:08:fe:f7:9d:f9:be:
72:fb:22:ad:a2:b8:c0:29:ed:14:8d:b4:e2:49:53:36:11:c4:
b5:2c:30:bb:2c:2d:0a:a9:52:ac:3a:f4:c2:9c:d8:80:be:df:
aa:46:81:5f:14:7d:32:71:84:a3:73:56:42:84:f5:8d:f1:d0:
30:69:c8:a1:70:a8:76:c3:95:5d:c9:e1:10:72:9e:e7:b2:e5:
c0:50:c0:2d:0f:32:10:b5:4c:36:ef:5e:73:19:89:db:19:5f:
5b:cd:c2:a8:fd:c0:aa:a3:11:19:dd:2e:9f:9b:be:82:36:1c:
be:67:1e:be:39:e3:ac:9a:3f:0f:ec:e5:f6:cd:56:5c:a7:82:
c5:49:f4:1b:df:5a:ce:b2:88:2a:f3:03:49:1c:75:a2:e1:3e:
ac:2e:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:41:03 2025 by rpki-client