Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fb3c7e8-69f8-3442-be11-c34efec9e708.roa
File: 4fb3c7e8-69f8-3442-be11-c34efec9e708.roa (raw, json)
Hash identifier: d7y8l34NLGKeg8CaJ0wdoH8DkQCkt1Qcmftbyovoj/I=
Subject key identifier: 15:88:80:2A:77:C2:99:61:B4:ED:FD:21:D4:51:DB:CC:3E:8C:5D:31
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A10F21B60E25AF887E79860
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fb3c7e8-69f8-3442-be11-c34efec9e708.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.198.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:10:f2:1b:60:e2:5a:f8:87:e7:98:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d138b52b-42ab-4536-858f-4577fb90799b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:65:03:77:d4:b9:56:99:06:61:5b:41:0e:
df:ff:b0:48:2f:cc:48:cb:59:28:b2:e4:db:3d:fb:
64:96:8d:1b:88:6d:2b:9d:6c:30:b2:36:56:c2:8b:
e7:4f:28:b4:47:da:56:8f:f1:5b:c4:26:5b:97:de:
52:39:df:bf:7b:9f:75:43:ca:7a:39:00:46:13:e6:
ca:11:ec:d7:2a:e1:d6:fd:1f:37:40:b1:3a:c3:52:
3b:eb:a6:85:4d:67:d5:29:69:77:24:bf:c3:90:3a:
9e:25:95:29:73:5f:9f:cc:bf:ed:40:be:d9:be:80:
9e:70:df:a6:a8:bc:94:0f:31:87:bb:90:88:98:3e:
bc:4e:ad:e9:aa:eb:e8:0d:aa:fb:e3:be:2c:40:ea:
ce:df:15:c6:fb:8e:b3:be:d8:a5:c0:22:96:4f:d0:
6d:f7:7a:e7:da:b2:06:31:69:d8:51:f5:75:c7:3d:
64:ce:b1:c4:83:38:db:90:13:06:26:9f:73:3e:13:
73:51:dd:99:4a:d8:e0:58:6a:89:ba:f9:f1:e0:05:
e8:8a:37:25:e1:7d:c7:90:d9:10:f0:39:4d:02:29:
77:9a:7a:1f:2e:72:ca:9a:20:c2:1e:b9:9d:3b:18:
b5:d8:55:6c:fe:36:e0:7a:23:18:5f:0b:c4:ac:ed:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:80:2A:77:C2:99:61:B4:ED:FD:21:D4:51:DB:CC:3E:8C:5D:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fb3c7e8-69f8-3442-be11-c34efec9e708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.198.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:d1:fb:7f:10:9f:41:61:67:f8:bb:63:c4:80:7f:65:f7:8d:
f8:62:4f:d5:af:b5:82:db:4a:41:f9:d5:87:61:4c:b0:e9:5d:
92:03:a2:60:b7:c9:c7:0e:34:7f:59:a1:38:51:95:6e:88:c3:
f6:08:53:8f:dd:cb:83:4b:67:47:7d:53:06:b7:ff:1d:ab:a1:
5f:c8:9c:d6:61:6e:91:25:f9:86:e9:b7:4d:ab:c3:8e:a9:a1:
a8:e6:2e:be:7d:a9:6e:ab:3b:4c:37:e2:63:20:a1:e2:2c:c0:
41:8c:b9:62:c3:f5:31:17:1e:ab:0c:76:6a:47:01:07:aa:22:
f8:97:1f:3c:d0:fe:1d:fe:9d:4c:f8:13:d8:3f:2f:d8:45:fc:
86:a5:ca:14:5a:a9:6d:66:3e:7c:3b:a1:45:90:a2:1b:dc:c0:
29:73:b9:c8:d1:0e:13:29:ad:ce:05:b7:9a:38:cc:25:b1:1f:
81:6f:54:49:7d:23:d8:1c:02:f8:98:01:63:ad:4d:c2:52:12:
a8:c7:4b:0a:67:36:d3:0c:c8:41:b3:2a:da:48:97:d2:1f:79:
07:c4:bb:3f:e5:71:2a:e8:2a:6f:9d:1d:15:56:65:37:83:fa:
40:c0:97:83:fb:a3:2f:4a:21:79:5a:26:ec:90:19:36:6d:0d:
31:88:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:57:43 2025 by rpki-client