Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52b149ee-7149-351d-8a63-859b2bbe6da0.roa
File: 52b149ee-7149-351d-8a63-859b2bbe6da0.roa (raw, json)
Hash identifier: +mkZBiMiY3owPnD766Sx+y6FA5Da6xmeZK6TCXxVYUA=
Subject key identifier: 5D:AB:2D:E7:12:C9:1D:14:F2:55:51:B6:E3:FC:29:E7:90:40:70:B4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A12171B36F7990286497240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52b149ee-7149-351d-8a63-859b2bbe6da0.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.203.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:17:1b:36:f7:99:02:86:49:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=17050e15-9c25-4bcd-bd00-988017aadb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:e3:7f:a2:75:99:a9:32:a5:ba:c2:e4:ba:
de:5d:85:ba:e6:ce:2d:75:01:7a:97:f9:85:14:2b:
64:7e:62:b4:d3:65:3e:4b:16:55:b6:6f:4d:8c:51:
fd:ac:06:d6:78:8d:0a:06:1d:cf:75:43:13:a3:73:
14:fb:bf:b2:3e:67:0d:c2:96:ba:28:0d:cd:71:d4:
3a:fa:fa:90:77:89:d2:e0:ae:1a:aa:06:24:45:c2:
2d:47:50:64:b4:80:13:a8:66:62:14:07:86:bf:1c:
d8:ba:e9:80:64:1c:d2:4e:d9:e5:d5:7c:65:ad:93:
c7:91:90:dd:9b:fc:14:8d:9f:07:38:32:b8:ad:5d:
51:c6:c2:22:b5:7b:be:a6:1a:29:75:a9:d1:4a:b7:
f6:54:5b:10:d4:35:bb:e1:d1:18:15:5f:cd:e2:3e:
9a:4a:0a:d3:b5:c5:08:5c:a6:71:06:4a:33:31:7c:
cd:c9:fe:03:eb:7d:52:06:55:37:b0:e9:7f:d4:5f:
a2:0a:6b:ce:bb:d9:6e:c9:4d:13:25:53:ec:d0:42:
3c:6d:98:07:bf:64:54:3b:84:06:72:75:f9:19:8c:
fd:c7:6b:80:e4:c6:71:67:55:70:d8:bc:14:43:9d:
54:39:1e:0d:90:56:b3:b1:25:6a:5f:2e:b9:75:43:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AB:2D:E7:12:C9:1D:14:F2:55:51:B6:E3:FC:29:E7:90:40:70:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52b149ee-7149-351d-8a63-859b2bbe6da0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:c1:86:82:04:ae:fa:ac:6f:72:ce:b1:9a:c5:c6:08:f1:04:
d2:02:ed:34:7c:b5:0d:f5:66:1b:1f:97:fe:23:dc:1e:bd:93:
4a:19:cf:9e:fd:99:60:1b:d4:fe:aa:a1:85:4f:2c:bc:5c:10:
58:ac:5d:ae:a8:a7:fc:5a:c0:1e:e3:a2:1b:9b:f4:bd:bd:fe:
b3:7b:86:5f:c0:05:7c:a9:05:03:f3:7c:74:19:4d:5a:e7:d5:
07:ff:31:97:66:5d:2f:8d:f2:d1:08:26:bb:84:1b:d9:d7:e9:
3d:34:8f:95:c0:9f:a4:fb:8c:67:e6:2a:e1:76:d9:c3:4e:d7:
de:e6:ab:3b:7e:6e:4f:67:52:e0:f3:31:d8:4c:11:a8:b2:28:
03:e9:cd:21:cb:df:43:bb:a8:b4:b4:dc:5e:fb:eb:80:13:f4:
a8:f2:b2:e0:68:a9:0c:2f:f7:67:cf:98:74:f8:a7:ec:2b:07:
6d:ea:aa:4b:67:33:68:d6:6d:5b:3c:50:94:9b:4d:5a:0e:c8:
e5:16:80:80:54:f2:8f:fb:6d:dc:b6:14:ef:e3:99:61:36:78:
a3:61:2d:26:f1:e3:46:17:5c:8e:e5:0b:9f:9d:07:99:44:07:
ad:72:be:c7:51:22:79:79:92:36:f8:22:58:29:bc:05:ce:c1:
93:cc:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:28:14 2025 by rpki-client