Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60eb21e5-5c8c-3f35-84ff-d7b608a25045.roa
File: 60eb21e5-5c8c-3f35-84ff-d7b608a25045.roa (raw, json)
Hash identifier: 4Me5U8ATfK2gvyJmS2ux1yiiSBx3UfCs1cn9N78/bM0=
Subject key identifier: BC:EA:E3:F8:38:63:5B:17:B6:D5:37:AE:00:66:BF:15:ED:04:79:38
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2663DE91458AE1B5C37440
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60eb21e5-5c8c-3f35-84ff-d7b608a25045.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.193.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:63:de:91:45:8a:e1:b5:c3:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8990f2f4-e022-4303-812d-f80efe6a4d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:a4:ec:fa:e6:06:9a:e8:6a:5d:fd:bf:3d:
49:ef:e7:f0:dd:4f:2f:0a:cf:24:ea:d4:4d:ee:1f:
21:a2:17:6f:ca:41:1e:c6:ab:1a:85:7f:87:ba:b2:
fa:a3:7c:30:6a:c7:4f:f0:78:01:ae:c6:93:30:47:
e4:68:1e:66:1b:69:c4:2a:1b:69:e4:38:f4:73:31:
e8:2e:5a:ec:1d:38:d3:17:1a:d0:bf:36:57:2a:10:
74:ee:83:0f:77:4a:e9:ac:c7:ce:5a:bb:01:f4:8c:
7b:4c:65:6b:3c:6e:63:68:44:c2:9b:14:43:e8:5b:
65:19:58:57:4f:49:e5:3b:97:97:04:23:f2:55:ce:
ad:28:1b:a9:87:9d:13:de:1a:dc:66:1d:cb:aa:f5:
ed:44:ea:02:ff:33:78:c6:01:26:fb:e6:22:49:10:
5f:7d:85:65:2f:07:ae:91:e8:6e:35:c4:ef:e1:eb:
a9:33:ea:73:c4:85:91:da:32:c1:ca:b8:c4:63:7d:
0c:d7:cf:0e:2a:cd:b6:11:d3:fb:b1:89:aa:09:a9:
50:c7:19:78:22:98:62:5e:9a:45:97:b1:e1:ab:c6:
dd:a7:aa:ea:db:31:8b:76:26:66:ef:b4:ca:26:52:
73:f3:98:09:c5:b5:b1:75:3a:6f:75:ce:96:54:9e:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EA:E3:F8:38:63:5B:17:B6:D5:37:AE:00:66:BF:15:ED:04:79:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60eb21e5-5c8c-3f35-84ff-d7b608a25045.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.193.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:05:97:18:a3:c7:2c:3e:65:aa:ef:60:90:fc:bc:66:4c:ec:
0b:c1:6e:1e:af:1a:0c:cc:4d:7c:0f:78:49:2a:f5:97:7f:6b:
d1:42:df:f1:1b:5a:00:7d:3b:2a:e0:24:ec:c0:6f:96:0c:aa:
b0:4f:b8:a9:80:fe:5a:b0:31:4b:0a:69:2a:4b:1d:18:c0:55:
0d:f9:6f:91:c8:ef:10:5f:8f:24:14:cc:f8:9f:69:44:d0:d0:
fa:ec:ba:65:dc:8e:39:51:c2:27:2f:7f:fb:98:2d:c8:3c:5c:
90:6d:a1:c7:dc:bb:8c:a9:dd:f0:43:21:3f:1b:69:e2:cc:da:
f2:c4:31:55:10:ed:c1:23:7f:dc:45:ef:93:4c:4e:b9:2d:a7:
41:7e:dc:e0:70:87:d9:ba:a5:a0:17:57:8a:3a:ce:90:06:3f:
2c:37:3c:20:28:7a:11:97:11:7b:79:12:00:2a:7e:e6:8e:c3:
bd:2a:da:bc:73:5a:ca:95:a6:5c:b3:75:d3:8c:a6:31:b4:75:
57:70:7f:39:b9:b6:d1:44:15:34:13:e7:76:4f:5e:22:6a:e6:
f5:d9:b0:75:31:99:fc:df:56:9c:68:d7:69:75:a8:d1:fc:d8:
48:83:a7:79:f2:ad:c9:44:59:cc:e2:99:25:b5:bb:26:37:12:
23:b6:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:12 2025 by rpki-client