Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fd9adb0-d737-3add-ae5d-9d0afe6a12c7.roa
File: 4fd9adb0-d737-3add-ae5d-9d0afe6a12c7.roa (raw, json)
Hash identifier: fGnomptlnHAOpfZRP0mj2Zjd+/9RpJdOfgECgVbCl6Q=
Subject key identifier: 20:D1:03:DA:70:CD:6D:5D:BD:CB:C4:4C:1F:E4:98:84:E7:E5:5D:75
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A200A6C7D26847FA14BA1C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fd9adb0-d737-3add-ae5d-9d0afe6a12c7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.223.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:0a:6c:7d:26:84:7f:a1:4b:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=52a6ed66-a826-414c-be84-a9ea5a9abeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:ed:19:ef:50:ea:cb:a4:da:21:a2:3c:7a:
10:d9:40:fa:6a:26:86:2b:f9:99:bc:79:58:9f:06:
92:c3:56:3f:5c:23:02:21:9c:86:65:7d:15:5f:8d:
bf:c0:35:8f:34:49:4b:93:d4:9b:b8:cf:3f:7f:70:
a2:b7:d9:0a:8e:de:c6:bc:60:51:54:09:e3:5f:1a:
3c:38:89:69:8d:26:60:be:2d:ee:09:c8:00:c3:c9:
1e:ca:7e:97:7f:18:3e:99:81:3d:8b:f3:a3:75:27:
eb:b6:dc:0a:48:de:7a:22:37:a8:7f:d1:81:0f:a8:
78:05:cc:3f:eb:72:00:c8:fa:8c:39:74:64:eb:85:
e7:c5:f7:3d:00:02:56:a8:e5:a1:e7:3c:c4:90:4c:
7e:e8:1c:22:23:aa:85:38:5b:cc:3d:e8:6b:bc:0d:
17:04:27:2d:80:f3:3d:3a:2d:59:3a:26:ac:17:d0:
a4:37:68:5b:dd:b0:e8:a2:39:e5:f2:fb:70:2f:a9:
5a:9a:f2:36:09:dd:aa:7b:2a:a5:df:a6:46:46:32:
18:06:e4:67:7d:1d:ef:66:db:4d:93:a4:29:3e:4c:
f4:32:e1:f1:5f:72:0f:ae:08:92:61:83:03:6c:90:
76:f8:24:2b:b8:cd:1f:45:53:0e:02:17:66:eb:75:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D1:03:DA:70:CD:6D:5D:BD:CB:C4:4C:1F:E4:98:84:E7:E5:5D:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fd9adb0-d737-3add-ae5d-9d0afe6a12c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.223.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:b0:70:fb:aa:d6:79:9f:35:ed:c0:0c:d5:78:26:23:1a:77:
5b:af:2f:a6:ad:80:fc:23:41:89:62:3d:3e:22:cf:59:3f:df:
b9:62:29:61:cd:60:2c:bf:c2:b3:f5:24:23:65:00:de:25:61:
a0:61:4c:35:28:64:e1:f3:26:b1:7f:35:a5:30:c9:06:dd:e2:
de:0f:52:17:14:3f:75:10:87:2c:08:aa:27:0d:07:68:5d:86:
8e:5e:c7:81:97:c7:17:06:8a:7f:96:a7:16:31:51:c9:7b:c4:
35:e5:d2:66:9c:fc:8c:94:9d:cb:ca:a4:6b:5c:9c:ea:c9:27:
c5:b5:e9:6b:04:b9:fd:4e:c0:92:07:89:2a:1c:9d:21:3d:3c:
ad:e5:55:11:88:94:b5:6b:d4:1d:1f:00:f6:55:64:f8:72:14:
90:98:e8:6e:ed:c1:91:7f:61:05:45:f4:4b:43:57:5e:4b:70:
d5:d4:ba:a3:1e:23:eb:86:7e:9c:62:82:bb:c4:83:7f:35:a9:
c4:70:e1:26:21:d3:49:06:51:89:4a:ea:f3:98:6b:24:26:04:
76:09:fc:b1:03:ab:02:c6:1e:76:ce:a6:a0:a9:41:ba:93:83:
be:a8:49:14:0a:c1:90:c0:2b:d6:fe:59:3d:64:1b:62:22:54:
4a:6a:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:20 2025 by rpki-client