Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5864e03b-c742-31cc-8e74-426a53d861c1.roa
File: 5864e03b-c742-31cc-8e74-426a53d861c1.roa (raw, json)
Hash identifier: T6NbCxPEkhWqV3O0mPY01XPDPwhR+KkKRQv8VBLcLk8=
Subject key identifier: 23:A6:54:67:D8:66:F5:8E:C3:65:A5:75:E4:94:0D:D4:95:67:AD:91
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A23BE7B8247A4E19D0A5200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5864e03b-c742-31cc-8e74-426a53d861c1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 35.206.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:23:be:7b:82:47:a4:e1:9d:0a:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2d72c33b-af91-4507-bf85-fbd6f9c4df7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:5e:45:36:3c:cb:94:9b:ed:0b:4f:21:2f:
2b:0a:f1:aa:ff:e5:ff:f3:ca:b6:a7:b1:7e:bc:9f:
06:3e:cf:6d:a4:6a:75:06:1a:e5:e8:9d:e6:7c:09:
8b:16:b7:7d:00:81:35:2c:1b:18:b6:24:58:ac:5d:
06:db:38:ba:f9:4d:de:a8:08:35:dc:19:74:3e:17:
c0:cc:44:62:31:4f:e7:8c:cd:df:fa:2e:82:69:f9:
d1:64:d1:7e:de:db:c4:38:d6:7d:a1:fa:a6:f6:c9:
3f:fc:b7:59:36:95:b8:4a:81:41:2f:65:0f:ee:be:
bd:69:ea:c6:4e:a2:5d:ed:6c:35:35:cc:0b:40:5d:
d1:21:6a:52:70:f3:27:6b:b8:59:29:0b:ab:3e:9b:
1c:a8:d2:36:6c:ae:54:97:60:54:93:fa:cc:28:78:
57:ef:f1:67:30:5f:d5:6d:63:89:9f:56:1f:87:31:
72:ce:fa:07:9a:07:be:29:31:a3:a5:24:f9:3c:91:
69:45:ae:12:19:e8:b8:40:98:ce:bd:ef:3e:6b:b0:
44:20:a1:43:4b:c9:ae:db:b7:07:7b:62:c0:42:53:
3f:18:b5:fe:07:5e:99:1e:c8:1c:05:f9:5f:ae:12:
45:7a:de:12:db:9e:14:e0:82:5e:30:1b:52:4f:0e:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A6:54:67:D8:66:F5:8E:C3:65:A5:75:E4:94:0D:D4:95:67:AD:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5864e03b-c742-31cc-8e74-426a53d861c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:4b:d1:81:83:cf:a1:40:3e:39:20:53:0a:27:36:ce:b1:41:
c4:a9:53:bf:c6:ee:6a:20:ef:90:ca:0c:f5:39:ed:1a:54:52:
3b:f2:cc:49:78:37:00:81:fd:ae:51:03:82:7a:11:42:4d:15:
cf:9b:be:7c:6b:92:04:b8:e0:27:a2:09:86:ea:cd:6c:48:8c:
ce:bb:f4:ff:aa:50:86:08:1b:b5:67:a2:6e:d7:e5:3d:f3:40:
98:db:49:10:b7:2f:f3:82:4d:ba:9f:1e:7a:be:85:b5:0d:71:
b8:0a:4f:f0:47:5b:af:14:5c:ec:d3:1f:30:9a:4c:d6:87:7a:
e4:b2:15:0a:db:42:ef:05:7e:63:29:19:54:82:3b:29:dd:e5:
78:cf:19:f6:39:47:1f:c6:5a:87:db:0e:11:b0:61:59:68:11:
24:7a:30:57:55:af:53:eb:82:32:1a:3b:94:b0:a4:39:af:13:
6b:6b:b2:80:5d:42:16:52:c2:57:83:1a:37:56:a7:49:f7:76:
69:25:44:e2:5d:df:e9:70:c2:75:04:0b:11:b3:d9:95:bb:b8:
99:f2:21:1c:12:7a:b7:e8:2b:5b:dd:c1:24:9e:7d:0d:1c:df:
27:26:5b:f9:1e:e5:51:61:80:4b:1e:39:00:cb:4a:8d:59:19:
a0:80:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:13:00 2025 by rpki-client