Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46a55594-0261-3a30-97e8-8d5685a166a9.roa
File: 46a55594-0261-3a30-97e8-8d5685a166a9.roa (raw, json)
Hash identifier: oQA2ycvqQBV2ZBXQUMMeUzqKmJgUGjQSF0Dfe5AhaC0=
Subject key identifier: 40:5F:28:34:01:17:03:32:58:D9:B8:B0:1F:A3:AE:17:A2:38:EC:7F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F825797566FD63B3A0E600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46a55594-0261-3a30-97e8-8d5685a166a9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:25:79:75:66:fd:63:b3:a0:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b7ffeb77-6135-46f9-95d6-53496211dcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:d4:a7:dd:56:53:cc:b7:05:53:8d:fc:d6:
fb:f0:ef:d5:b4:2f:90:e6:19:4a:cf:b5:d4:60:09:
c6:b1:93:bd:1d:e2:e5:78:aa:35:ac:2b:5b:f0:3d:
18:7f:06:f2:93:df:0b:18:13:e6:44:1b:de:d0:53:
49:d4:05:ca:65:ab:48:7b:6b:df:39:96:17:c8:75:
60:84:e2:2e:72:eb:60:0b:6e:4d:9f:8b:7a:b7:f7:
79:7d:08:4b:c0:12:28:f9:6e:70:f7:51:b9:7a:62:
23:5c:5e:1b:a5:e6:88:21:a3:f5:0a:64:7c:d9:24:
1b:57:c9:9d:09:69:41:86:d2:dc:f8:82:5a:77:0b:
f7:56:24:41:92:b9:f2:03:ee:5f:96:02:50:bb:bc:
b5:82:53:ab:40:9c:40:ad:31:f8:95:c8:1e:c2:ed:
e7:7c:1a:ff:5a:0b:c1:dd:13:43:28:93:60:75:fc:
3d:fd:46:41:72:b3:ea:86:7a:58:07:7c:b4:63:25:
97:0e:19:94:1e:f4:9f:98:4d:35:94:9e:c6:ec:73:
98:0c:59:55:9e:ef:38:f2:66:be:0e:ef:eb:15:34:
2f:19:96:0e:76:8b:b5:2f:ba:43:c3:72:48:3b:1b:
d4:10:11:e1:5a:63:5c:4c:14:86:d8:00:54:7c:da:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:28:34:01:17:03:32:58:D9:B8:B0:1F:A3:AE:17:A2:38:EC:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46a55594-0261-3a30-97e8-8d5685a166a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:bf:29:c0:9c:af:e4:f0:2a:70:f3:f5:5f:92:a3:0a:31:f4:
9c:f6:f7:8d:a0:9b:b6:a9:74:c8:65:86:d0:73:f9:bd:53:8f:
a5:a5:76:57:ab:fb:c1:22:2a:0e:26:e4:b5:a9:61:17:44:65:
83:95:18:92:51:91:fd:34:b1:ef:8d:68:a3:2a:62:4b:33:f4:
e9:86:39:90:02:0e:9c:b0:29:c6:24:ab:2e:be:f6:26:27:f2:
e8:53:00:46:99:29:af:1a:c5:b1:35:0e:15:d5:16:3d:20:12:
14:e5:c6:81:fe:ca:0f:39:78:48:a8:fd:7d:5e:a1:64:12:37:
ae:2b:1e:50:a8:ef:f5:44:61:be:56:c3:66:82:fe:0c:76:f7:
14:2a:6e:30:69:b2:a6:cb:ac:f9:a1:0a:04:c8:d0:43:93:73:
a3:4f:55:ab:35:18:fc:ca:c6:da:f7:6f:93:2e:c7:9d:fa:b3:
4b:47:96:fd:47:d6:60:95:ae:14:54:98:8f:24:93:c8:17:1a:
71:57:5a:b0:d1:36:22:03:44:a0:7a:78:98:c4:90:b9:c5:c0:
43:33:aa:ce:fa:45:f3:10:e6:62:e6:be:6f:8f:9f:4f:2f:98:
9f:be:0e:5c:eb:7d:ba:54:df:8b:af:69:84:bd:51:13:ce:52:
e9:a9:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:36 2025 by rpki-client