Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64719d85-ecec-3ab6-9891-2eacb65df28f.roa
File: 64719d85-ecec-3ab6-9891-2eacb65df28f.roa (raw, json)
Hash identifier: zGhAiFV9EkVlTcw4f5NAKKeeol49ilKy39oIH+cFa5E=
Subject key identifier: 64:A6:D7:28:B3:3C:9D:1F:C1:7E:51:A1:80:B0:2F:72:34:67:5D:0F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B065510D4B64CF0E4DF05BF0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64719d85-ecec-3ab6-9891-2eacb65df28f.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.197.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:51:0d:4b:64:cf:0e:4d:f0:5b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=ed8346dd-3904-4703-a338-18a3d6ffd9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:59:c6:5b:a3:6b:45:5c:df:6a:da:11:45:
cc:ce:ed:33:85:a8:32:86:73:ec:7b:dd:af:b1:4f:
9b:86:4f:27:8f:03:aa:cf:d6:a1:a9:71:9e:8e:a3:
6a:83:b2:6b:94:7a:c4:22:bb:2e:f1:41:bb:70:32:
c6:4c:fb:33:1c:ae:7e:95:0f:4f:a0:e3:29:8f:46:
a6:81:fc:ed:73:bd:22:37:3c:9b:2a:4e:bc:f5:72:
d7:fa:9b:dd:e4:fc:6f:44:9d:5f:40:b9:b1:8b:db:
be:1b:d7:cd:68:84:63:de:87:b1:95:39:17:aa:5f:
2b:9d:ca:e1:3d:df:3c:d4:60:3e:73:82:5b:1d:6f:
fb:24:8d:a1:32:50:4c:1e:f7:59:1a:d5:1a:0b:40:
3e:00:77:70:96:69:75:4e:4e:03:ba:23:2f:a4:ff:
43:1c:42:0e:19:c6:d3:b5:b7:df:2c:c4:18:a2:83:
5c:bd:3f:3c:2c:64:ad:01:27:b8:53:8f:00:49:bd:
09:8b:ef:71:25:10:20:23:b7:60:0a:a9:57:35:a1:
4e:63:cc:d4:ed:0e:a0:54:ee:d5:f5:ac:91:45:0a:
d9:9c:37:05:7d:91:4f:d2:15:ef:ed:85:23:30:d3:
ba:30:1e:17:ed:63:4b:17:d3:44:41:c8:4b:a7:a6:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A6:D7:28:B3:3C:9D:1F:C1:7E:51:A1:80:B0:2F:72:34:67:5D:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64719d85-ecec-3ab6-9891-2eacb65df28f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.197.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:c2:8c:92:d1:1c:84:50:f9:ab:7f:c2:22:2b:5d:a4:37:0e:
73:43:c7:a8:6e:f3:50:9a:3e:8f:42:ed:57:fb:6f:87:f9:19:
1f:5a:4c:39:d7:51:42:1e:bb:67:00:ee:eb:01:02:08:a5:5d:
5e:07:6a:ae:05:9f:d8:79:58:3c:bb:74:dc:0f:2c:35:35:c4:
32:c4:84:cf:b7:08:69:43:c3:fb:07:66:c5:17:2f:3d:01:2d:
d7:a8:52:ec:40:78:54:2d:28:2d:67:e3:ec:7a:3a:46:21:a3:
a9:63:66:89:ef:34:a5:2f:6d:19:b1:ad:da:90:9c:e6:cf:45:
8d:73:2d:76:d3:f6:ca:ee:7f:53:51:d8:15:7b:38:06:b7:34:
22:0a:1d:ce:e7:b9:2f:8f:0c:2b:8e:82:b5:89:b7:1d:24:84:
f4:59:1b:9a:95:e4:cc:8e:b4:90:c3:2c:a8:3d:c3:bd:ce:03:
52:ce:51:15:1d:f7:96:cf:cb:0f:8e:1a:ac:12:72:34:66:0d:
90:29:81:3d:29:c3:a2:f0:8b:ae:b9:da:75:9b:b1:40:51:4f:
3e:cc:51:8f:d4:d8:fa:82:70:78:e4:c2:dc:53:29:b1:1e:ba:
11:4a:59:2c:c7:25:67:0f:3b:79:81:6f:d1:d8:cd:35:1b:64:
78:90:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:42 2025 by rpki-client