Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5faef615-8e72-3294-b691-4f0a64660429.roa
File: 5faef615-8e72-3294-b691-4f0a64660429.roa (raw, json)
Hash identifier: rnd781xhiyVjCUaoZ1ySXnhPJ/W5O7nwfRyZ4bdw2Y4=
Subject key identifier: E2:54:97:CE:F2:68:74:8F:46:4C:42:FB:87:01:85:E3:C5:A0:33:2F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F63762A4B5B254D97A8080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5faef615-8e72-3294-b691-4f0a64660429.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.245.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:37:62:a4:b5:b2:54:d9:7a:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2fec4e0c-6e42-493d-989c-63c134262001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7c:10:a3:a5:bc:9f:f4:6b:c2:6c:45:83:c9:
db:36:53:81:11:79:ed:93:ad:12:88:4d:3a:a8:8f:
a0:7d:37:46:1a:ff:18:76:fe:70:95:3f:2f:46:3e:
14:95:d7:4b:65:12:57:76:90:69:d0:15:a7:2c:bb:
d8:48:0f:a7:13:57:1d:28:d0:a6:f4:0a:f3:81:e6:
cf:1d:a2:7c:31:4e:e1:1e:ee:3e:6c:46:a1:a2:25:
66:c3:9e:c8:cf:1a:d3:ac:1d:87:0e:07:2e:7f:5c:
50:ac:2f:a9:fc:ba:09:7a:55:15:fb:60:87:d6:25:
06:39:99:62:09:f9:75:0b:12:66:21:be:60:43:c4:
38:c7:0f:84:a0:92:b7:93:9d:f3:3e:d2:7c:0a:fb:
d5:de:b4:94:de:78:e3:7e:b6:fb:01:b4:0b:34:25:
46:85:52:8d:2e:c7:b7:db:30:18:59:f3:73:5c:36:
6f:8f:c4:1d:c0:b8:81:50:b2:40:ab:ee:0c:4e:45:
6f:56:7b:a6:2a:34:d8:f9:09:73:84:5b:bc:01:54:
d0:1e:4d:4d:17:46:18:0b:cd:12:c9:78:00:ca:e2:
88:fb:36:e2:60:0f:cc:4b:56:53:ca:5e:32:30:1c:
ef:b0:4a:32:c7:a3:50:0c:91:22:8d:d3:b4:05:a2:
7d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:54:97:CE:F2:68:74:8F:46:4C:42:FB:87:01:85:E3:C5:A0:33:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5faef615-8e72-3294-b691-4f0a64660429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.245.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:d8:f1:77:a9:41:2b:81:52:ad:d2:ee:72:cc:0c:27:8d:49:
5c:d7:40:bc:0a:de:e7:6d:da:2e:13:1e:01:d3:9f:d3:4b:ae:
d4:53:0a:ca:a9:10:8e:b4:2e:e3:25:73:96:c9:9c:51:6a:79:
74:1b:3c:c3:a2:d2:5d:cb:7a:d5:20:85:55:80:26:78:57:90:
ca:31:89:7b:d8:7d:ee:7f:08:bd:75:0f:c2:b0:de:de:d6:16:
1b:9a:31:76:9a:c8:d0:c2:76:61:14:71:a8:54:50:56:43:ff:
9d:b0:91:cc:f3:49:9e:41:01:1c:9f:71:41:87:f7:49:fa:d5:
0a:b6:5e:07:55:18:96:00:37:b0:bd:06:ea:74:6f:4a:5f:2a:
de:63:96:b5:e8:a6:69:e3:aa:80:d1:a8:59:dc:12:19:d4:6c:
70:d6:ba:5d:1c:d8:4a:1e:3a:f8:92:d4:7a:75:da:8e:93:73:
cd:7e:d6:ba:8b:37:0f:0c:6c:a7:95:58:8a:64:2f:a1:d1:53:
0f:51:e8:c5:f1:e6:c3:9e:b2:ef:2e:8a:15:25:6d:2b:33:da:
c0:a8:fc:15:66:2c:d5:b3:b5:4b:26:23:35:cf:19:07:ad:1a:
5c:83:3c:c0:7f:cd:e6:7e:10:da:b0:de:5f:44:15:6a:03:d8:
0c:00:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:21:04 2025 by rpki-client