Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bae64da-c915-3170-89d1-9f364c3c0b6d.roa
File: 3bae64da-c915-3170-89d1-9f364c3c0b6d.roa (raw, json)
Hash identifier: lV9PWueeTjX+Rw3VOe+zk4Mh/lyma7SWxzSGyVcg44I=
Subject key identifier: 67:91:01:FA:F2:6B:D2:97:D3:62:4F:93:13:11:74:D3:93:14:E3:9E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A24F0920C30261000044500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bae64da-c915-3170-89d1-9f364c3c0b6d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.243.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:f0:92:0c:30:26:10:00:04:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=28619a9a-93a1-4052-8d34-80ea38f96fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:e3:78:7f:ea:3c:dc:19:f3:0c:11:43:c8:
93:f0:db:24:c4:e7:62:57:aa:46:5d:e1:bf:15:b0:
ea:08:57:ff:03:ca:b7:99:17:47:41:21:0a:cc:d3:
a4:15:11:14:4b:c4:f3:b1:7a:1d:03:11:33:25:3a:
11:d6:a8:a6:52:51:83:bf:9a:63:22:5b:3a:0b:f7:
e8:48:27:be:cb:f2:90:ee:ec:10:57:2a:04:2b:3b:
19:2b:14:f2:3b:66:77:4a:b4:c5:38:c6:34:d7:ab:
f5:34:3c:fc:52:10:10:f1:be:07:cb:3b:7c:3e:84:
84:50:a2:99:22:ae:79:27:c6:0e:29:12:91:2d:79:
c0:ff:31:20:08:00:87:c1:19:97:b3:bd:fa:a0:a7:
f1:1d:e5:99:82:f4:45:4a:39:2f:65:2c:65:22:98:
3e:54:81:45:29:e3:7e:f3:77:3f:20:d4:87:0f:f9:
a9:26:f0:66:fe:b4:e4:e3:2a:e3:15:74:cb:83:0e:
3d:1e:a5:f4:2a:23:b3:96:eb:04:50:ac:d4:39:21:
88:55:e9:63:2c:37:86:16:ec:eb:dc:2c:4e:43:f5:
e3:e6:72:6b:5d:7c:ee:4d:d8:cd:86:1b:ed:fd:2c:
32:86:29:45:06:21:02:99:f2:c6:03:c2:a5:93:f0:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:91:01:FA:F2:6B:D2:97:D3:62:4F:93:13:11:74:D3:93:14:E3:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bae64da-c915-3170-89d1-9f364c3c0b6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:56:5f:13:92:28:37:dc:a4:de:5a:5f:87:62:cc:f9:c3:39:
27:e2:7f:3c:60:10:72:8b:e8:fd:e4:2b:16:0d:38:ed:2f:2b:
32:c9:72:5a:c0:10:36:d6:f8:1b:1b:8e:df:f3:03:56:15:29:
25:83:14:f0:94:1d:4b:8b:9f:50:b3:f1:e3:d0:27:2f:36:7f:
14:62:87:a0:c3:a3:cd:87:a9:35:0b:95:d0:9d:28:08:0c:a8:
d9:20:4b:a9:19:cf:e6:3d:75:97:fa:fa:4a:b2:b2:eb:4c:0a:
88:08:99:48:a4:7b:06:3d:52:ce:38:82:25:1b:e2:10:be:e2:
cf:e4:89:3c:2c:6b:95:be:e4:a1:9f:48:ad:da:53:41:54:ba:
80:77:ac:fb:5a:e4:db:4a:d4:7a:4a:79:a2:54:c3:d4:bc:bc:
c6:ef:b4:71:1c:8a:1f:6e:d0:3e:fd:6f:e1:b4:bf:33:69:91:
ec:3b:7a:2c:3c:52:ab:58:a7:ea:a9:b7:68:9f:1c:31:33:64:
43:6b:52:26:40:0e:00:1d:ee:08:29:5b:54:76:e8:90:b4:fa:
1a:a8:0d:7c:38:73:68:11:44:06:35:50:9e:c2:33:5a:23:fe:
bc:53:98:a4:5e:d6:46:52:72:6d:74:50:2c:4b:9f:24:2c:4e:
5b:18:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:50:53 2025 by rpki-client