Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fa1f895-34b7-3bd6-9d4f-763ad46943b3.roa
File: 3fa1f895-34b7-3bd6-9d4f-763ad46943b3.roa (raw, json)
Hash identifier: vjCt2+bnAnYiYhfF8YWu1X8uhqs9j9zbbKHaOKmC12M=
Subject key identifier: C9:B1:59:83:22:33:7E:12:84:18:8B:62:C5:5D:D7:F1:12:98:83:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A06A4606671FBBF4E84DD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fa1f895-34b7-3bd6-9d4f-763ad46943b3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.227.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:a4:60:66:71:fb:bf:4e:84:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=484638f1-ec28-42be-8a25-18e889c055eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:43:69:62:9f:f4:08:23:67:ff:3e:ff:0d:a8:
fe:bd:02:06:de:9b:61:18:4c:dc:52:b5:d0:5e:51:
1f:d9:36:e8:d6:11:ef:dc:fd:89:84:ff:e2:90:71:
f5:3e:8a:97:d9:75:f6:87:4a:68:2b:43:a5:22:61:
7f:65:84:b5:8e:1d:87:2e:11:85:5a:55:79:fb:34:
cc:70:18:0f:bc:8a:1d:db:fa:10:17:21:d3:dc:3d:
2a:dd:dd:76:34:ee:62:99:17:d0:76:98:f7:f9:fe:
42:66:be:f4:e1:d5:0d:9a:64:a4:03:81:f2:59:d0:
b3:7b:1f:e9:12:a1:1e:cb:e7:4b:c1:f2:7c:61:f7:
2c:d0:b5:c8:45:05:4a:11:d6:a8:21:c2:11:7a:e1:
0f:af:45:a2:0f:ff:ab:fb:29:c6:54:03:5c:3b:44:
11:d1:62:e7:f6:44:ec:3a:6c:11:c7:09:8f:7c:3e:
26:8b:63:21:c6:58:f6:99:ee:5e:8f:1f:1c:3e:8b:
bf:cc:3c:fb:42:76:52:6f:a8:17:7a:0f:c0:b0:55:
42:5d:d1:02:17:c5:88:b3:f0:7f:48:05:24:e6:cb:
40:a1:93:f1:5a:6e:fe:eb:a9:cf:8d:66:91:8a:88:
99:f6:a7:cb:0b:a6:4e:85:8f:53:73:29:47:4a:cc:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B1:59:83:22:33:7E:12:84:18:8B:62:C5:5D:D7:F1:12:98:83:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fa1f895-34b7-3bd6-9d4f-763ad46943b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.227.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:76:10:cc:69:61:85:3a:eb:56:95:01:2d:20:ce:b6:e5:b0:
d0:4b:77:d9:be:d1:4b:74:4b:bd:98:5d:9f:be:27:a5:b8:d1:
78:40:49:af:6d:a1:9b:11:e6:6a:85:b7:ef:33:ad:36:93:5a:
12:81:15:7f:e7:ef:c9:b2:3e:41:40:db:b1:00:9b:4d:31:1e:
ef:4e:a2:09:e1:c8:f5:ce:48:8f:dd:8d:4c:57:5c:e2:79:ca:
66:a4:7c:9c:f0:97:db:92:96:0e:5b:1a:2c:d0:b6:ae:7f:ee:
83:cd:cf:7e:9c:58:0e:27:39:7f:0e:2a:04:0f:c9:7a:58:73:
34:61:1a:39:ae:f2:dc:98:15:46:1b:71:f5:1c:bd:cf:30:bf:
e2:22:f6:f1:a3:08:b9:f7:9e:f2:15:03:96:2b:33:b5:11:0f:
51:70:24:a4:0e:f8:80:96:7a:08:10:46:33:61:07:0e:35:04:
72:f6:bb:43:62:9d:2a:77:34:14:2c:a7:d5:80:65:5d:48:f5:
56:70:08:71:81:ab:42:f9:94:9c:70:a1:a7:f3:b3:8c:bf:78:
3c:02:38:1a:e3:51:91:53:36:6f:27:9e:31:72:2c:8a:06:b6:
dd:26:08:a7:c4:80:67:4a:93:1d:38:63:31:16:f2:e5:bd:44:
95:18:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:38 2025 by rpki-client