Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49c77236-8401-323b-b9b6-d0d58ba9a27a.roa
File: 49c77236-8401-323b-b9b6-d0d58ba9a27a.roa (raw, json)
Hash identifier: jV50dMRO32xLjlOcxqxIa3vbIJ9gBbf+A8BIjq8bLG8=
Subject key identifier: 99:E6:2C:7D:A0:B4:CB:73:BE:85:85:A1:A7:CE:0A:7B:14:1C:04:F9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A11D5628DF475E4CA595C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49c77236-8401-323b-b9b6-d0d58ba9a27a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.239.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:11:d5:62:8d:f4:75:e4:ca:59:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c7ffb20e-44a3-458a-b324-a1c563e903f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:3e:59:1f:54:47:d3:98:4b:d6:9a:32:69:
92:63:4b:06:06:9b:80:0f:ae:d9:31:b7:ab:cd:62:
0e:75:5e:fb:ca:f4:01:34:db:f0:d7:5e:a4:89:1b:
4f:32:c6:e5:2f:16:e7:e8:9b:1e:5e:56:37:b1:70:
d4:44:3a:87:9f:b3:85:9f:18:f8:e6:db:95:51:d0:
a3:a4:0d:e9:84:5f:be:9f:b1:58:4f:f6:02:fe:ac:
44:ce:a4:5a:37:c7:4c:11:0b:18:e9:26:56:5f:cf:
e5:d9:e7:98:ee:53:cc:95:51:15:9e:06:5a:82:a2:
ea:5e:f5:83:a1:47:e0:61:2a:95:6f:37:61:a8:7a:
bc:24:b0:45:0b:50:54:0d:05:f1:8c:97:63:26:a9:
fe:87:4b:b6:01:a2:06:0d:aa:78:f6:41:99:6f:09:
8f:c2:40:86:07:ba:90:aa:a4:5e:e2:a0:f7:c1:84:
5c:6f:77:06:f3:c9:72:93:35:43:db:b4:e2:9e:78:
1b:8b:35:0d:c0:49:a3:08:0f:14:df:0b:3f:11:a7:
31:b9:d5:9d:49:bf:eb:dd:a3:cb:2e:c7:f3:26:1c:
34:00:05:ce:17:99:c3:81:12:c4:75:8d:90:86:e8:
c0:1e:43:f4:f0:2d:cb:30:2b:cf:d7:2e:2c:78:cd:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:2C:7D:A0:B4:CB:73:BE:85:85:A1:A7:CE:0A:7B:14:1C:04:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49c77236-8401-323b-b9b6-d0d58ba9a27a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.239.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:31:6c:5c:7f:c3:fe:67:38:57:48:75:7c:db:27:43:79:3c:
2e:a9:74:2b:c5:ee:5b:f3:8f:fa:95:27:5d:f9:5d:6b:13:12:
63:70:80:0c:b1:46:f9:ac:a4:7a:ed:9f:f4:01:e1:38:db:d4:
81:9a:7f:e5:a2:df:8c:8e:a2:a5:91:c8:de:67:06:d6:fb:17:
b2:ad:f8:14:59:07:a5:4d:67:0e:e7:97:82:b1:6d:1c:19:3e:
65:75:52:47:49:61:e7:01:4e:e9:d4:e0:3d:c3:4e:3d:1e:30:
d1:d6:ee:56:bf:0f:d5:fc:23:fc:49:e9:62:a7:d9:cd:99:c6:
7e:f4:50:af:0b:09:04:b2:80:65:9b:f8:d0:d8:9d:21:c8:a4:
e9:11:66:a7:5a:dc:13:66:4c:c7:49:c7:1d:32:20:04:6e:22:
7e:0a:31:dd:33:25:df:34:2f:dd:f3:70:6e:41:f2:4b:19:6b:
b5:6e:14:8f:d8:1d:29:8c:38:e5:31:8b:d4:7c:d2:ea:2a:09:
78:d0:ab:1f:b6:bd:44:f1:6b:cd:23:32:16:a5:8b:07:e8:bf:
3e:85:80:0c:50:2f:5f:86:15:02:96:44:ed:fe:15:b9:45:73:
48:53:73:7b:e6:cc:2a:0c:d5:4e:de:51:0e:9b:a9:25:04:f7:
ec:b0:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:19:25 2025 by rpki-client