Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e4e2607-2ee5-3e51-93a2-1e4f99937435.roa
File: 3e4e2607-2ee5-3e51-93a2-1e4f99937435.roa (raw, json)
Hash identifier: z4nMZ4MSor5tZwk5R6oTOWYWGNRqIOiiEL2rQV6mf9Q=
Subject key identifier: F9:F1:B1:7D:D6:3F:B8:A5:DB:0A:C0:B1:26:6A:32:56:DA:82:B0:06
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7ADA66A51E0663DB9700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e4e2607-2ee5-3e51-93a2-1e4f99937435.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.187.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7a:da:66:a5:1e:06:63:db:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=192d0012-116f-47b8-82e2-a2cbfef6958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:46:c4:42:fe:4b:ea:f5:81:bf:c0:c1:51:c7:
dc:4c:dd:5d:c6:03:a5:6f:68:65:a8:50:b7:3b:88:
50:4e:ee:eb:4b:6a:69:2a:d0:c9:d5:e3:30:7d:3e:
a6:e3:cf:24:0b:48:19:12:ca:7a:72:16:26:43:f9:
2f:f4:6a:a1:41:4e:70:8b:b2:40:cb:bb:a7:d7:81:
91:fa:3a:03:dd:5f:9f:d4:d9:4c:63:a3:30:3d:83:
0c:2a:43:04:11:50:0a:af:01:4d:98:7f:1c:31:89:
22:39:e9:7a:68:b1:de:08:00:9a:ab:04:ee:c4:57:
90:70:28:e2:70:88:a3:7d:05:7f:12:fb:84:f0:e2:
ea:8e:a8:bc:a5:cf:4e:46:6d:67:ec:5c:e2:61:1f:
f7:02:6b:25:17:21:98:ed:3a:8c:17:b0:f5:4d:0b:
3d:c9:43:f8:b7:d6:5f:07:fc:35:33:f1:50:f1:1b:
6e:f8:2e:de:a8:02:7c:fa:df:a1:fa:e8:ac:22:3f:
d5:87:8d:10:3b:f4:07:06:59:70:07:d0:22:f4:01:
00:10:bb:26:2b:1c:e5:ed:ac:00:ba:53:88:07:82:
ca:5c:6b:e8:5b:30:78:81:bd:29:c0:87:76:83:f6:
f7:ac:85:47:1f:10:f0:23:5c:df:95:7f:d2:c0:7c:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F1:B1:7D:D6:3F:B8:A5:DB:0A:C0:B1:26:6A:32:56:DA:82:B0:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e4e2607-2ee5-3e51-93a2-1e4f99937435.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.187.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:6c:fe:9a:ba:70:68:b4:9c:be:8d:99:09:db:6b:2c:51:79:
b3:5f:3c:fc:84:d6:cd:0f:ac:d4:06:95:a2:ce:24:01:b9:35:
31:e5:e0:37:7c:02:fe:70:3e:53:06:92:83:e7:80:83:cc:58:
1b:87:7b:01:5f:4e:69:f4:fe:90:50:55:75:e3:08:15:a5:03:
6f:8e:ed:f6:a3:5a:4b:44:a7:af:29:e0:65:78:84:69:8c:79:
84:54:8b:86:d5:03:d8:2a:84:1e:a5:13:ee:94:a1:97:a7:2c:
25:55:0e:fc:d5:3c:fa:e8:42:73:4c:ed:b2:8a:fb:da:46:63:
6f:07:f6:a7:8b:3b:1e:ab:40:78:d6:47:e8:f9:5a:2f:38:f1:
ea:67:ea:7a:3e:32:8f:63:1b:f4:ed:9d:71:d7:91:54:39:5b:
38:cb:56:29:a4:fa:5b:eb:bb:29:81:91:39:8d:ba:35:e1:9e:
d8:3a:22:18:8b:c6:45:3d:1c:c1:43:84:2e:62:33:7d:2d:bb:
07:71:b9:65:4e:b8:81:2a:7d:29:d6:6e:3b:fb:20:6b:a8:a9:
33:3b:39:43:58:9a:f1:02:72:3e:43:87:39:25:54:ed:e1:ec:
58:4f:97:e4:6d:46:17:e5:7e:21:2f:51:00:38:b7:ec:ed:63:
c5:45:d0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:19 2025 by rpki-client