Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ce21664-8c98-3cac-a2fd-a42483945a01.roa
File: 3ce21664-8c98-3cac-a2fd-a42483945a01.roa (raw, json)
Hash identifier: 7+MpVeTh91/bzDvfWWhyDBjeynf89NOtoJt/sno/+z8=
Subject key identifier: 83:0A:15:7E:3C:B1:A9:1C:FE:30:ED:51:0A:97:F1:4C:9E:2D:D0:1D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0FFEF5BE1243717826A200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ce21664-8c98-3cac-a2fd-a42483945a01.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.204.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:fe:f5:be:12:43:71:78:26:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c56c7149-297f-4c81-965d-f81aac5f7ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:dc:37:27:f2:dd:94:fa:c5:de:55:b2:05:
af:3b:98:49:2b:7b:67:82:d6:4d:c6:69:ee:86:c0:
b7:06:54:5b:e1:ea:72:ca:e0:25:3c:0d:bc:7f:75:
4b:a2:80:82:11:fe:a2:95:09:41:c1:5d:aa:a7:45:
a9:99:c9:ba:b1:a0:8a:b3:d7:a3:8a:45:05:f3:1f:
89:f5:0a:b8:2e:6f:02:d0:9a:90:64:a8:6d:82:7a:
c6:7f:7d:79:e9:bd:e7:92:07:cc:01:fd:04:dc:af:
b6:d3:7d:f8:45:87:de:f3:6e:f2:38:26:4c:d7:ba:
b4:2c:d6:70:3f:4f:53:50:41:5f:b1:87:03:b3:08:
4a:61:b3:50:82:35:91:c2:38:34:51:85:df:dd:31:
6c:d5:db:7f:a6:9e:55:eb:25:36:0f:80:e8:8b:ac:
73:d3:a7:09:41:ea:35:45:d5:04:a2:71:fc:21:b7:
5f:3e:5d:1f:2d:17:aa:70:a9:d1:fc:3b:59:23:f9:
02:96:64:a9:ef:4d:6d:3b:84:f0:6e:ac:4f:60:c2:
bd:89:35:f2:84:66:f5:d1:08:32:af:75:34:3d:7c:
05:89:a1:d4:76:0c:bd:5d:29:e2:6e:3f:5e:a2:96:
6d:1a:8f:f4:86:05:2d:d0:99:81:e0:5a:b5:e3:07:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:15:7E:3C:B1:A9:1C:FE:30:ED:51:0A:97:F1:4C:9E:2D:D0:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ce21664-8c98-3cac-a2fd-a42483945a01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f0:ea:5f:e3:6b:b1:9d:dd:ba:cd:76:f8:18:61:94:f9:64:
83:99:20:8a:df:d9:57:66:a1:66:28:f8:03:4b:38:37:03:38:
38:82:6b:71:ae:c2:7e:aa:c0:d7:13:75:90:82:9a:f0:d5:ba:
0b:86:3a:6b:3f:72:ff:f0:78:c2:39:3b:5b:e0:c5:62:86:1d:
3d:37:e8:e4:f5:d4:0a:be:e0:c4:dc:12:14:b1:57:b7:26:b8:
f0:87:e8:cd:73:69:75:91:58:94:2a:d9:7f:c3:da:91:09:c6:
4e:c1:33:df:69:4e:f7:a5:41:fb:78:e7:bb:f2:95:40:51:2b:
c7:43:64:40:de:ea:d6:61:15:ad:42:dd:cb:44:68:81:a2:9a:
6d:6c:49:84:40:fb:ac:82:96:93:eb:2d:e9:d6:a1:db:e6:f3:
e5:eb:40:c3:45:bf:37:dc:dd:3e:36:1d:58:5c:b7:83:ba:a2:
49:b0:2f:a9:02:93:1e:1a:c6:76:16:d9:c1:20:9c:38:f9:b3:
7f:a7:66:f1:26:05:b7:e6:42:07:d4:ef:d4:01:86:7c:48:ee:
0d:a0:d7:23:51:c4:14:4e:b7:17:ff:0a:5f:44:4c:e2:75:50:
37:4d:73:d8:e9:73:4b:69:54:39:59:c2:a1:58:20:a2:80:5b:
8b:fd:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:25:21 2025 by rpki-client