Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/524f5545-5908-3f67-906a-b4e36e1b9e67.roa
File: 524f5545-5908-3f67-906a-b4e36e1b9e67.roa (raw, json)
Hash identifier: KFho91b8OkNLgzl55q8mrbIwOvARQRhjsiOiJrom8t8=
Subject key identifier: ED:58:2A:0D:20:B7:6E:4D:64:8B:E9:A5:51:1D:10:83:B3:55:30:AB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A041936202EE1797D5DD600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/524f5545-5908-3f67-906a-b4e36e1b9e67.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.230.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:19:36:20:2e:e1:79:7d:5d:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7ac54f58-8102-4d73-96bb-72e3ea1cfbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f5:08:45:98:c7:4f:ba:18:a1:76:9f:71:f2:
69:cf:be:b8:d4:bc:6e:91:74:45:c0:56:04:5a:22:
a8:ba:d6:e5:7e:10:e9:e9:3d:bd:0c:f3:be:ee:9d:
0d:85:0d:2a:5f:f9:12:bc:07:8f:68:dc:66:e0:7e:
de:ff:f4:eb:58:d2:c5:d1:20:db:9f:3f:84:b5:5d:
4b:4f:81:97:f3:f3:0d:d4:c8:a1:d0:b5:58:59:1a:
6a:7a:29:78:98:91:f3:d6:53:a8:7e:85:ef:39:c3:
bb:16:fb:7a:44:30:f1:2c:c0:67:d8:c8:cb:79:59:
53:52:08:65:bc:bd:25:bf:d2:41:b6:68:c3:8b:57:
fd:33:6a:a6:3a:11:c5:40:65:4e:6e:81:ea:4f:5c:
a9:67:28:45:c0:9d:41:88:6f:80:4e:c8:f8:46:b6:
71:9d:59:f1:83:0e:a2:a4:15:77:be:b0:08:5d:01:
ce:42:b3:87:fe:22:52:4b:93:03:ee:71:90:29:3e:
52:32:2c:83:3b:66:79:54:1d:05:05:38:be:73:9d:
a8:74:da:73:f3:69:d4:6e:7f:5f:12:7b:84:1d:eb:
9f:e1:d2:23:87:a1:c5:71:cb:a0:68:12:b5:20:35:
7e:0f:3a:4f:7b:ee:80:1c:94:dd:07:23:e5:c4:69:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:58:2A:0D:20:B7:6E:4D:64:8B:E9:A5:51:1D:10:83:B3:55:30:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/524f5545-5908-3f67-906a-b4e36e1b9e67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.230.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:e9:22:d9:f1:42:63:5a:4e:62:e9:62:32:61:2f:43:5e:44:
c6:3d:ed:05:44:0c:98:b2:1f:5e:22:74:d5:ae:90:52:c5:e1:
1e:cf:c4:7b:7a:e3:ee:3a:4e:a7:33:6c:d0:8e:7e:88:da:d8:
d6:ef:e4:0d:36:32:8f:c5:3b:95:72:28:be:39:31:99:f8:f0:
77:40:ce:12:25:7f:27:1d:92:e9:f0:ae:cf:fa:52:79:39:52:
cf:1e:d5:ea:54:6a:1b:5a:7a:fe:7d:1a:89:56:44:28:40:49:
f3:07:97:f7:db:5c:dd:e1:92:3d:0e:bb:d5:75:00:2b:be:3f:
8e:ab:23:4a:cc:9b:b6:9f:e3:81:84:cc:65:23:a1:d8:c4:c4:
ae:1f:2b:52:70:34:de:4b:18:a6:d8:eb:6b:39:17:fd:7f:17:
90:32:d6:43:8d:5b:f3:1b:d4:05:46:1f:07:3f:d4:e4:3b:e4:
68:89:ef:65:62:81:08:4e:86:2f:20:8a:32:67:e3:91:6f:88:
d7:ad:98:29:78:ad:23:a8:cc:2b:0e:6f:cc:26:53:08:39:e2:
b3:7a:55:b8:e0:5e:7a:6a:76:eb:be:f9:af:15:80:c4:90:6e:
b2:33:b3:d9:86:ac:8e:7e:d4:6f:26:57:45:63:f3:09:ea:5c:
52:1c:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:50:09 2025 by rpki-client