Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38a1c98c-6bad-3ddd-b62c-397fb0693cbf.roa
File: 38a1c98c-6bad-3ddd-b62c-397fb0693cbf.roa (raw, json)
Hash identifier: HhTnoZrxwIWhmEPug+ORrRvZrIAi66XWBwlhpjMjFwU=
Subject key identifier: CA:AD:CB:66:2E:EF:69:F8:AC:A7:E8:A6:A8:78:AC:4E:A2:E9:74:EE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F4259913074B33A94C2900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38a1c98c-6bad-3ddd-b62c-397fb0693cbf.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.203.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:25:99:13:07:4b:33:a9:4c:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=79bba2e2-92dd-46e3-bfd2-fbafc9d73203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:3a:78:17:2d:32:ba:f0:51:2c:ce:91:96:
34:ef:29:e1:73:92:48:8f:70:67:6f:f3:f5:77:e6:
34:92:c1:6d:76:5f:fc:2b:1c:9d:81:fd:8e:6a:71:
f1:de:0c:9b:25:50:26:04:a5:61:d4:7c:8c:89:cb:
1c:55:21:d5:77:d5:eb:b0:c5:4a:7a:b1:bc:32:90:
3b:90:3e:db:1d:6f:e0:60:0d:06:a9:bf:7c:0c:0e:
80:22:99:4a:59:c8:f3:0a:8a:2f:6b:b2:c7:85:1d:
f5:2a:56:4d:a4:66:bc:f0:7c:a2:04:82:b9:fc:a5:
09:b2:af:d0:ac:5e:14:e6:cf:f1:22:a9:0e:9a:7f:
b9:10:1c:aa:0f:c7:2b:f6:81:cd:8c:ec:9b:b0:8b:
93:79:ae:55:56:7c:e3:67:5e:fb:0c:a1:51:42:83:
3b:2d:69:a6:b7:41:b0:3e:01:6f:3c:64:13:0b:6c:
07:12:f8:10:4b:9b:58:8d:18:d1:eb:2b:0b:66:87:
1a:58:77:4e:89:82:41:be:06:3c:5e:57:92:6b:de:
a9:15:3d:37:d6:37:d0:9e:43:ed:07:e8:8d:0d:03:
61:93:da:9f:e1:45:64:89:9e:fd:4f:96:10:b0:7a:
96:cd:fa:9c:6b:9b:7b:2d:1f:9c:fe:39:d1:e9:90:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AD:CB:66:2E:EF:69:F8:AC:A7:E8:A6:A8:78:AC:4E:A2:E9:74:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38a1c98c-6bad-3ddd-b62c-397fb0693cbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:27:35:c0:2d:c7:cf:1c:09:b3:e2:19:28:42:4f:b2:fb:92:
a2:50:50:32:60:d5:b3:99:7c:f7:bf:03:60:37:4c:25:82:9f:
17:8e:e7:2c:b8:fc:f7:89:76:a7:0d:14:67:ef:c0:a3:63:15:
29:b2:d9:cd:6e:75:f5:0a:7d:ef:12:59:84:d0:bf:92:df:a8:
7c:e7:0d:fc:93:01:3b:45:6c:54:f1:15:d0:63:fc:14:92:63:
5e:64:2e:a7:79:c0:3f:19:8c:52:f7:72:29:d7:c8:4d:0e:91:
7a:04:df:4a:0f:00:ee:a3:ae:55:ca:8c:c5:e0:95:89:26:fd:
40:4d:07:1b:4c:f6:19:4e:24:cb:22:04:01:79:53:0d:58:2f:
6c:3b:f1:2d:45:05:60:f1:9a:d2:43:16:1d:3f:63:05:c2:b3:
01:f8:f5:e3:8d:07:90:ad:25:6e:dc:2e:9c:1f:20:c5:15:e0:
04:e6:c3:74:fd:0a:0d:b3:7c:e9:74:e6:bc:e5:29:12:61:41:
8a:3d:85:9d:fa:db:c5:43:c5:88:64:ee:e5:d8:07:d9:30:ab:
eb:cd:33:41:fc:44:a1:4f:65:d6:82:b9:a1:31:e9:e8:1b:ea:
6a:7c:af:d5:85:a6:6f:74:b9:da:ed:93:c6:0e:4a:63:78:43:
79:ef:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:09 2025 by rpki-client