Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bfc202a-efe1-3dae-98fb-b45359c9c41f.roa
File: 3bfc202a-efe1-3dae-98fb-b45359c9c41f.roa (raw, json)
Hash identifier: WPYJ7nbKLx18OVwWZp1tMnz47f7I7c9Vd3FdwSPZ5IM=
Subject key identifier: B0:4B:F8:3F:63:BC:DD:EF:31:C9:83:BB:07:A7:CC:77:C5:CB:04:22
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A04C61FF48A8E13065E6380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bfc202a-efe1-3dae-98fb-b45359c9c41f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.239.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:c6:1f:f4:8a:8e:13:06:5e:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8efb9359-335e-4408-88fd-89cffef2f80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:c5:78:8a:25:69:50:b0:c8:0c:29:23:39:
9e:b9:71:a7:8f:43:4b:9c:c1:c7:22:ca:3e:32:2e:
01:d2:c2:23:8d:f3:dc:4f:fa:bc:15:0e:d0:91:e8:
9b:fb:1f:a1:8f:25:33:78:36:a4:91:7c:b7:8a:d9:
d0:86:bd:74:93:26:56:6b:26:71:7a:11:65:e7:31:
df:7b:8a:62:9b:87:b0:f9:89:c9:28:a1:4e:56:09:
7c:1a:cc:9e:2c:e6:68:1e:22:9c:14:6a:59:9b:9a:
2f:d0:ec:bd:1f:e1:c0:ae:29:f0:c7:cf:1a:b3:0f:
b9:e8:bc:28:b0:17:5d:db:b8:2b:35:ec:ff:da:0d:
de:bb:06:83:ea:bc:c5:20:59:43:dd:4f:14:d2:8b:
63:59:1b:89:f7:b9:18:11:f3:1b:cc:36:0e:4b:ff:
44:39:99:09:86:65:42:9f:60:1b:62:44:3a:d3:82:
59:42:5f:4f:7a:6d:07:bb:dc:ba:0d:e7:f1:71:86:
55:87:ed:68:73:38:cc:d7:7f:21:ca:12:1d:8b:18:
5e:a3:cc:14:a5:93:d5:81:18:9f:5c:0f:c6:a4:72:
67:46:39:1b:12:f5:6e:93:8b:68:fc:29:f3:70:9e:
48:9f:a0:5b:9a:40:50:09:ec:78:70:1a:9e:e1:63:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4B:F8:3F:63:BC:DD:EF:31:C9:83:BB:07:A7:CC:77:C5:CB:04:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bfc202a-efe1-3dae-98fb-b45359c9c41f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.239.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:cb:e1:87:47:d4:4f:28:48:a8:46:9e:77:cf:85:2f:49:c9:
1e:93:94:b0:9f:34:6f:aa:0d:84:37:e4:49:b7:91:bd:87:e7:
75:17:79:5c:73:15:0f:e5:97:6f:da:09:04:61:58:f9:e8:ce:
07:0b:2c:5b:5b:f1:7b:19:39:fd:50:a8:fc:fc:7a:45:f1:91:
4c:58:2e:f6:74:e9:d2:58:e8:1a:d6:5a:48:e4:07:54:53:48:
72:96:e4:b3:b4:f8:00:2d:32:f8:5a:a8:96:72:38:42:d9:cc:
a4:34:9a:1b:48:cd:8e:e0:3f:54:b4:94:f3:1b:9b:1f:e2:16:
d5:a1:42:d0:3e:89:bf:f2:88:db:c5:cf:e5:ad:70:10:2e:83:
9a:5d:6d:6a:f3:03:b4:62:2f:dc:e3:d4:3b:b7:60:cc:2d:ab:
3e:d6:6c:56:21:f5:2a:46:89:3c:61:53:4a:cf:3a:a5:48:ca:
84:d5:6f:a3:03:0e:60:25:06:48:24:e0:f4:13:2c:e0:13:25:
f1:0d:7e:e2:05:2d:aa:39:18:b6:e3:c1:01:8e:9a:c9:2a:11:
fa:f8:30:6e:74:c1:b9:a9:2b:3c:a8:18:93:e1:a1:a8:8c:44:
2b:5c:89:38:6d:3a:5d:72:e5:07:be:95:a5:3b:eb:e2:9d:b8:
c0:1f:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:20:54 2025 by rpki-client