Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b17949e-fa2e-3757-9203-f3dd20d283c8.roa
File: 3b17949e-fa2e-3757-9203-f3dd20d283c8.roa (raw, json)
Hash identifier: d279QNXq6NFCxwv1iWa7viKp52XTwYPd864TLvGrRzE=
Subject key identifier: 05:3E:F9:07:3F:87:01:EF:4D:7A:87:CD:BA:12:F2:27:7B:3F:AD:FE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A035E8F2CCF3163F12E21C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b17949e-fa2e-3757-9203-f3dd20d283c8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.188.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:5e:8f:2c:cf:31:63:f1:2e:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=79c95bd4-0322-4ffd-ac0e-1b9b66899981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:d5:b1:80:f2:43:89:b7:1b:e4:85:6e:4d:
f5:db:20:33:32:90:b8:69:6d:d6:ea:78:0e:03:ba:
aa:b3:54:17:c2:40:38:09:84:72:5f:6c:6a:c9:6c:
4f:29:43:25:d8:93:a8:8b:cc:4f:99:da:68:8d:cb:
8c:5b:69:4f:56:34:a3:24:e3:c5:e5:0d:3b:64:b3:
70:13:0a:94:36:e4:fb:99:70:44:52:18:96:62:82:
e5:1d:9c:3a:07:a4:c0:80:fc:59:3d:ab:82:1a:39:
59:0a:15:13:a4:5f:6c:61:de:ea:4d:bc:52:40:ea:
a3:a9:be:a0:ad:8f:50:ac:a6:ab:a7:50:43:46:6b:
e2:0f:b7:66:9f:df:0d:d4:12:4b:44:62:4a:4f:d6:
57:54:35:25:8d:98:88:28:be:e9:6f:bc:a5:42:4f:
01:35:af:18:7d:71:c4:e2:39:12:50:c0:07:2f:91:
93:03:bf:27:ca:53:9f:b6:04:eb:93:a4:82:66:1a:
f6:c8:bc:72:c6:36:33:31:b3:51:43:ad:ee:66:8f:
1a:19:33:ac:ca:d3:46:ba:ff:f3:1d:d3:7d:0d:da:
bf:0d:4c:a1:12:72:44:08:df:4b:ef:f0:07:44:6f:
f0:1c:af:10:31:0d:1a:2c:30:68:79:a8:9c:8a:34:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3E:F9:07:3F:87:01:EF:4D:7A:87:CD:BA:12:F2:27:7B:3F:AD:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b17949e-fa2e-3757-9203-f3dd20d283c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:6e:f4:0f:fe:ac:38:a9:08:24:a1:8e:73:41:25:85:2f:ff:
a4:fe:6e:49:56:5c:07:f3:4f:3b:aa:7a:20:74:08:29:ae:dc:
b9:34:d6:b1:c4:0e:3d:f8:fa:24:a9:8d:57:f5:d1:1f:78:d0:
d6:7a:65:d3:8b:eb:15:1c:0a:c5:16:7d:c4:fd:f6:27:1b:b1:
15:72:27:24:b1:65:53:38:45:de:f8:7b:e6:e1:c4:9e:32:fb:
15:0f:65:dc:c3:a8:58:2f:77:ba:33:23:ce:a5:42:fd:3b:c8:
97:26:2b:62:22:00:de:b7:db:29:a3:d8:a6:8f:a7:41:d5:1d:
fd:a7:ae:3c:ce:c1:a0:a2:d6:25:c6:6c:b1:56:ac:1d:c9:12:
57:04:75:85:f8:ab:a7:5e:85:87:a0:9e:82:40:a8:50:c4:30:
a2:96:70:fa:d6:e1:5a:1d:40:95:f1:44:bb:30:33:1d:18:75:
08:33:d7:08:e6:24:5a:79:8a:d3:17:c6:b6:94:58:7e:ab:04:
25:16:8f:2b:e9:f4:ad:26:35:5c:4e:20:d9:01:27:ff:07:55:
8e:0f:70:39:d8:db:7c:61:89:31:ee:fc:0c:aa:e7:67:f4:69:
5e:5c:da:3b:38:aa:ad:be:e4:5d:e2:a2:1f:d1:30:ab:ce:ee:
58:78:f2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:10:22 2025 by rpki-client