Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f1c9c83-9533-3c40-9322-3477e2eb6da4.roa
File: 3f1c9c83-9533-3c40-9322-3477e2eb6da4.roa (raw, json)
Hash identifier: bj9+7RxKV/I+JqDIjGNO6noXiISCRSA/EaxyMrP1jpI=
Subject key identifier: 1F:DC:9A:14:A8:6A:45:98:BB:DA:AC:72:27:98:97:99:98:BE:03:BE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1554B1CEA8FEEE7313A4C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f1c9c83-9533-3c40-9322-3477e2eb6da4.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.230.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:15:54:b1:ce:a8:fe:ee:73:13:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=06e48b12-fb06-474f-ac22-fdd47eb521d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:bf:d9:d2:98:1a:17:be:39:a2:98:37:8f:
91:25:77:aa:bf:ef:51:f4:5d:a8:d1:d2:1b:eb:eb:
ed:22:22:fb:d8:d4:be:0d:bc:f4:75:b8:ef:3b:6e:
e4:23:af:50:da:d5:4a:4b:3c:41:c6:0b:ee:11:e8:
cb:52:4d:78:e5:19:60:a8:70:76:3c:63:18:bf:bd:
49:46:e7:60:64:c4:83:ee:15:64:2c:f8:8f:1e:2b:
fc:7b:06:7e:a0:6d:e2:ba:e0:e1:fd:6c:da:b4:bf:
c9:35:48:50:5f:27:2b:a0:c7:2c:45:86:02:14:ba:
07:22:ab:5c:04:d2:c1:cc:6b:21:db:37:65:ac:72:
dd:a9:5d:a9:61:4a:8d:e0:74:3d:32:1d:f0:84:8a:
b8:e9:4a:b9:a2:c0:a4:84:12:5c:37:f4:65:20:50:
e7:5b:69:41:2e:1f:df:db:a7:a3:10:2f:7f:fc:9e:
1d:14:81:96:7e:43:7c:cf:40:e2:93:f9:b2:63:00:
e1:e1:2b:28:ef:c0:ad:ca:44:26:00:65:04:7d:fc:
55:50:2f:7f:fd:b8:9c:38:09:ad:ab:9a:20:b2:3b:
a7:84:17:1e:f6:0d:9d:c1:18:0a:42:4e:80:ce:e1:
91:73:f6:40:9d:29:6d:46:dc:e3:92:17:92:b7:35:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DC:9A:14:A8:6A:45:98:BB:DA:AC:72:27:98:97:99:98:BE:03:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f1c9c83-9533-3c40-9322-3477e2eb6da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.230.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:ac:4d:0f:9a:8c:90:71:55:65:c8:11:2d:7e:85:1c:f0:e3:
5d:73:b4:fa:6a:62:4f:3e:a5:0c:8e:96:39:43:d2:a7:63:5a:
de:0b:e2:67:9a:e0:75:c1:98:e9:ec:1e:dc:3a:f5:dd:f3:33:
7e:da:4f:fd:0f:9c:15:32:cf:bc:b1:08:c0:3f:91:8d:60:48:
2d:c9:2c:9d:f0:c6:80:fd:fd:05:f6:64:b8:89:3b:6e:45:0e:
92:39:3a:ae:56:a7:7c:04:3f:df:38:92:63:67:55:c7:e0:98:
c8:b6:b5:e5:0f:a0:94:0d:46:85:71:b2:8e:fe:0a:d2:13:0f:
95:b0:77:03:50:60:47:be:0d:6e:5c:18:b7:31:10:3f:c9:b7:
a9:e1:46:52:1f:9e:78:b4:5e:1f:b8:46:af:1d:1c:76:65:ed:
d8:a8:2c:67:04:09:ae:1f:38:ad:47:ef:f8:af:45:ed:4f:4c:
fe:ae:db:14:e2:2d:4f:38:e3:fe:d7:c8:e8:34:6f:8c:0a:64:
7d:94:1a:cd:ac:1a:ef:68:bc:dd:e5:c5:4e:ea:16:1f:1c:79:
1f:03:98:4f:83:5d:d1:0a:ee:20:62:7c:ed:10:6f:ea:b5:ef:
6e:fa:4a:b1:f5:2d:93:23:27:54:52:c9:c1:18:7a:d8:7d:32:
4d:47:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:13:08 2025 by rpki-client