Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d0a769c-9b11-3b78-a40b-b5de5a99b91a.roa
File: 3d0a769c-9b11-3b78-a40b-b5de5a99b91a.roa (raw, json)
Hash identifier: bcud/2Yf7Hx8j8ReEfeuX0cPz7wgPj030/X0WDe1i7k=
Subject key identifier: 7A:29:77:48:EF:90:EC:73:D5:E6:FD:E9:72:23:C9:5F:E5:66:57:B0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1B88331A08B6F554FD6480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d0a769c-9b11-3b78-a40b-b5de5a99b91a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.186.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:88:33:1a:08:b6:f5:54:fd:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f6325bcd-aa73-4ce8-a363-e177600b7f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:6e:01:0c:fa:b5:fd:27:52:2b:df:97:12:
68:20:1a:e0:40:cd:8a:0a:a1:df:68:c4:5e:da:e6:
ba:6e:4f:fc:6d:dc:20:f1:6b:18:80:88:f6:24:c2:
86:21:f5:d3:c9:d0:11:0c:18:2a:0a:26:fd:07:b2:
2b:58:43:aa:a6:ae:19:76:b3:ba:c4:ef:1b:67:96:
c9:41:c5:42:6a:fe:c5:11:ae:89:66:3e:c1:0b:c2:
44:56:72:09:ae:3f:46:7b:85:dc:7a:25:e2:b9:11:
ec:fa:cf:3b:e5:37:8e:02:46:88:35:a1:e9:4f:76:
e5:a0:e3:d4:f1:93:20:ac:da:8b:b6:0b:82:11:f9:
78:69:3c:91:ab:a3:02:bd:2e:29:13:8f:65:e5:06:
9d:10:cd:df:74:c7:98:eb:3c:29:17:14:dd:16:e1:
84:79:13:e8:fd:c0:3c:d6:42:b2:aa:d9:12:0b:7e:
5e:c6:1d:d2:45:61:01:ec:8d:b5:0d:40:7f:8e:04:
c4:57:d3:65:fe:cd:63:94:38:b6:49:e2:14:ba:41:
3d:a7:b1:62:92:cd:f3:45:9d:e3:2b:5e:5d:84:82:
bf:02:96:cc:38:03:0a:77:57:ed:7d:f1:08:02:62:
4a:29:26:3f:36:af:21:23:aa:e7:8c:59:16:23:ee:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:77:48:EF:90:EC:73:D5:E6:FD:E9:72:23:C9:5F:E5:66:57:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d0a769c-9b11-3b78-a40b-b5de5a99b91a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.186.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:51:5e:0e:f3:91:7a:b1:86:1a:aa:3b:2e:74:73:be:62:75:
1c:fb:3d:7e:49:58:79:47:c5:8b:e9:88:9f:ab:d3:b1:a0:06:
97:2f:54:5c:da:cc:26:d3:d0:cf:c9:fd:42:ad:86:b6:19:c1:
16:f4:6c:d4:7a:71:b8:bc:0f:d5:cb:98:3b:c8:40:aa:e6:08:
f5:23:46:e3:dd:f6:93:5a:f2:d3:8a:44:ae:02:c2:90:a0:db:
96:47:08:9a:29:a4:97:36:3c:4a:87:62:b8:8a:64:a7:80:f6:
ac:42:1e:6f:a7:97:da:dc:79:19:f2:a5:2d:e4:a8:59:11:1c:
b3:3b:19:bc:90:ab:52:93:bc:9a:88:ba:82:d2:60:21:9a:4f:
95:6d:8d:90:0f:58:dd:2e:ed:09:a2:ac:a5:46:a4:e0:1e:dc:
a9:e1:57:71:72:5d:67:c3:4e:68:d5:6a:42:88:02:fe:d0:1b:
43:11:bb:e8:ef:26:0c:a5:4f:13:f0:2c:87:2f:e1:c5:ff:36:
63:42:a8:10:dc:19:91:c9:ad:8b:ad:20:e8:55:08:83:bd:ec:
8e:0f:f7:47:68:c6:02:48:42:90:83:1f:25:ec:4a:da:1b:86:
be:b4:b5:ed:37:d8:1d:eb:c7:cd:3a:d8:9b:2e:23:8f:8d:08:
b5:33:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:03:34 2025 by rpki-client