Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/462c134c-f338-3cd9-8f43-55ada17739ea.roa
File: 462c134c-f338-3cd9-8f43-55ada17739ea.roa (raw, json)
Hash identifier: KZbIAFyj+6qiFt8PeSSs36AQCUM120RsnYTCxtP5p14=
Subject key identifier: 9B:8A:FE:BB:A2:21:14:F9:65:C1:10:18:63:07:A8:2F:3E:71:A5:4A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A219D24B4EA75D2AA325C08
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/462c134c-f338-3cd9-8f43-55ada17739ea.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.247.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:21:9d:24:b4:ea:75:d2:aa:32:5c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3c2d10fa-fcc3-4abf-94e5-365bb6a09efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:5e:4c:e9:2a:d0:78:86:db:eb:36:24:9b:
fc:ed:1f:b1:a4:3e:b1:cd:03:6d:69:c7:43:61:42:
f1:f3:ca:54:3b:e1:24:e0:77:65:31:8a:28:3b:c0:
d4:d1:08:25:99:e5:a8:55:08:01:69:cd:3b:f0:3b:
38:10:8c:e8:e6:b8:11:de:ae:4a:ad:ed:8a:e3:25:
95:d6:7e:13:e4:51:55:d7:1a:2f:46:5c:1d:e8:0d:
64:3a:e8:90:bb:4d:dd:82:07:9a:8b:82:cd:06:75:
f3:7d:41:3b:67:04:bc:3b:da:f2:0e:f1:ed:36:bd:
d0:f6:a8:c6:eb:96:5c:2d:e7:03:f4:fd:6b:68:81:
1e:3e:93:14:53:67:f2:11:44:98:a6:5d:4d:11:b1:
50:49:0f:36:6f:37:e7:66:c0:3f:1f:9b:92:92:97:
70:72:83:6a:47:cd:2c:31:f4:30:b6:2b:73:77:2f:
77:a1:a9:96:11:d0:19:c7:08:65:86:e1:ec:ad:df:
c8:a0:c0:51:c7:ba:67:8e:ec:ba:69:e6:a1:41:56:
5a:e8:c2:a2:13:31:36:27:93:1a:f1:75:9b:a6:11:
78:a6:03:c6:9f:7b:70:96:08:b7:30:17:04:1c:23:
f8:29:4e:24:46:c8:e8:16:a2:9e:37:39:9c:e5:f6:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8A:FE:BB:A2:21:14:F9:65:C1:10:18:63:07:A8:2F:3E:71:A5:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/462c134c-f338-3cd9-8f43-55ada17739ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.247.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:1b:dd:1a:c7:cc:a7:96:98:cc:10:e3:70:0a:7f:34:8c:46:
5a:c7:e0:9b:1c:ce:04:3f:54:9d:4e:fe:2b:e4:96:4b:73:b4:
28:83:c1:21:4b:52:1b:3c:ef:65:55:c8:1d:26:6b:b2:b7:33:
18:18:93:ee:e1:ee:08:7a:40:7a:be:73:c3:69:1b:d9:4f:e2:
f3:ba:eb:7a:ca:f6:86:b3:44:42:65:b3:b8:ae:89:0f:d0:69:
44:49:61:74:18:ee:15:89:a0:9a:bb:9e:21:e7:6d:90:75:c9:
a0:a3:dd:07:63:d6:f2:96:b4:36:2e:d0:a1:5f:35:de:5a:fd:
77:07:fc:e4:a3:4f:0b:dc:1c:24:d8:b7:a6:2e:da:4d:c9:46:
04:e3:a7:92:3e:1a:23:ec:0f:b0:a2:91:17:cf:db:dd:69:d5:
65:8e:0d:a2:b6:c6:f9:58:cb:d3:7c:90:41:25:a5:87:fa:42:
2c:80:1c:24:24:c4:5b:80:1e:6f:50:f3:05:f7:83:8c:e5:d4:
17:72:98:3d:ef:f3:fd:ef:e3:eb:a2:ba:53:5f:52:37:98:88:
dc:64:67:53:89:e6:5b:03:0a:c7:a9:58:8c:c3:f0:98:3b:d9:
dd:15:08:5a:d6:80:33:58:3d:1f:8a:ab:98:5d:cd:dd:52:8b:
e3:09:06:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:03:57 2025 by rpki-client