Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/520f8c98-0337-3377-b63c-b91549246712.roa
File: 520f8c98-0337-3377-b63c-b91549246712.roa (raw, json)
Hash identifier: n7rvKa51c5prNSy4FJLyeeCgjN+bebfOjmigzxqQaN8=
Subject key identifier: 9C:6A:6D:D1:39:E8:0F:6C:EB:39:6B:DF:10:76:2F:D6:D1:47:BD:D3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EE1DDC769C161910D969F4
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/520f8c98-0337-3377-b63c-b91549246712.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.202.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:1d:dc:76:9c:16:19:10:d9:69:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=543cfc29-1fbb-4c2c-8e62-5f500e4908ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:e8:9b:c8:6d:35:9e:e0:53:fd:60:57:af:
57:51:61:c9:ee:48:07:12:ca:b1:d6:dd:33:5a:65:
dc:0b:98:ab:b7:0f:c0:12:80:46:04:b9:8b:6b:ea:
21:65:56:6e:2e:27:88:5a:89:c4:03:ed:d2:f8:41:
d0:2c:25:6f:ac:f5:ac:a1:cf:8c:80:63:fb:59:d7:
0e:27:99:94:65:a2:68:f8:cd:75:79:13:f0:40:1f:
b8:4a:b6:e2:17:d0:9a:88:1e:df:ab:e1:b4:06:be:
51:1c:5f:4b:d5:9d:17:86:a2:fb:72:02:a0:6d:7d:
0b:cd:5c:c7:69:d4:22:a5:07:be:43:91:2f:12:69:
bb:c7:79:80:de:5e:50:d8:3e:7c:79:25:d8:3e:df:
38:d1:e1:0d:b5:13:6d:98:67:53:7e:3d:95:6a:30:
2e:21:46:42:b8:38:6b:4e:4e:93:02:fd:8b:0f:80:
e6:e0:eb:11:5d:ec:21:17:33:ab:04:51:b1:55:d7:
74:43:4b:f0:35:f0:a9:03:3f:4c:4e:87:fc:05:4a:
67:e1:83:73:df:86:ea:8a:71:f1:09:1a:48:bf:74:
f1:2b:21:b4:e4:9a:fd:68:f5:a1:d0:d8:cd:f6:e4:
c6:5d:6e:68:1e:d9:5b:25:9a:a1:34:63:34:8f:3a:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:6D:D1:39:E8:0F:6C:EB:39:6B:DF:10:76:2F:D6:D1:47:BD:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/520f8c98-0337-3377-b63c-b91549246712.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.202.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:3a:37:c7:58:af:8d:38:a4:f8:c4:7c:87:33:3e:b6:49:77:
9b:9c:f8:61:86:41:b5:93:ec:ff:66:36:81:da:a7:58:2d:54:
d6:9b:2b:22:d8:00:bf:d0:92:e9:cf:6b:c6:f1:63:74:88:d4:
08:c9:70:24:6c:f0:c3:7e:ef:80:2b:a1:86:5e:6a:90:78:15:
6c:f5:4e:b7:16:62:04:41:80:89:ba:32:18:4d:d6:5b:9f:0a:
cb:22:33:e0:77:a3:63:75:52:3f:68:a3:97:d2:9c:91:a5:23:
b4:77:28:d5:bb:bd:bb:e8:54:86:81:5b:93:b7:e1:63:e2:55:
21:40:b4:15:e7:95:c6:96:f1:65:19:9b:93:58:4c:f5:5b:35:
8f:61:64:da:f0:3c:f4:6c:43:dd:1d:c0:fa:31:76:14:44:8b:
5b:c5:b5:da:f9:82:31:f4:ec:3e:55:8b:5a:9c:cd:1a:ed:52:
1c:13:96:20:c7:25:95:31:f2:ac:40:b6:cf:44:6a:cf:a1:0e:
88:2b:66:ac:e5:4d:ce:4b:c4:7a:72:c1:78:68:f1:04:30:0c:
c7:63:2c:73:4a:93:78:cc:bf:ff:16:b9:62:47:54:22:75:70:
19:a6:fd:5c:99:3d:67:71:67:e8:76:40:86:3a:77:b4:2b:62:
4a:21:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:24:26 2025 by rpki-client