Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65859b7c-316c-34d7-a408-6b674360dba5.roa
File: 65859b7c-316c-34d7-a408-6b674360dba5.roa (raw, json)
Hash identifier: Lfl9L0uEHUTOz/KDwYqD9+ixzKjtLNn6JNP2x0XAVJ8=
Subject key identifier: 4B:EA:E8:AD:64:B5:BD:06:0D:F7:7F:B6:24:78:6C:C7:98:F3:22:1B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F750F908C00E6FC88E14A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65859b7c-316c-34d7-a408-6b674360dba5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 35.204.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f7:50:f9:08:c0:0e:6f:c8:8e:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=de40c05a-ca0e-4714-9633-c2b2cbe165f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:4f:67:5b:bb:60:4f:31:1a:85:85:c3:38:
2d:a8:7e:a8:77:f9:ef:04:46:78:28:67:85:00:77:
4e:8f:05:89:d1:32:b2:45:2b:08:db:76:34:f8:35:
39:12:d8:da:1e:58:ce:76:45:7d:7d:b3:09:74:91:
44:26:b3:f4:dd:34:15:62:66:9c:9b:da:ed:4e:cb:
fa:0b:ef:47:84:8b:de:d2:aa:34:ee:c8:19:bf:97:
84:d3:ca:a8:ec:c0:72:a0:5f:5b:fc:a7:59:65:3f:
9b:4d:39:7f:af:51:76:79:4d:3d:f5:47:7d:34:5b:
95:bb:47:26:b9:0c:a9:29:28:78:95:28:27:af:70:
01:f1:f8:78:03:a6:8a:04:69:0c:1a:e6:bb:b4:9e:
76:42:19:24:88:d2:ec:22:6f:d9:fd:81:9a:8f:9d:
29:1e:87:7d:69:f2:5d:eb:6b:b7:96:b3:a9:71:5d:
f5:09:e9:39:1b:02:da:95:3a:8e:45:23:2e:83:1a:
88:63:4f:46:dd:0a:38:49:9e:4b:8b:5e:ea:d9:32:
fa:81:32:8f:35:d7:6a:83:e7:2c:81:c2:ed:3a:d9:
ab:71:50:44:89:ca:a3:ef:54:f5:d2:be:be:21:95:
b5:64:75:ba:0a:a2:40:32:bc:f7:d3:c3:94:ce:4d:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EA:E8:AD:64:B5:BD:06:0D:F7:7F:B6:24:78:6C:C7:98:F3:22:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65859b7c-316c-34d7-a408-6b674360dba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:bd:84:c6:f7:ac:b6:bf:7d:36:2b:41:76:ac:e3:7f:f1:cf:
ce:bd:f9:e7:0c:a6:34:b5:ee:50:80:4e:31:b0:8b:14:5a:2d:
f9:7d:13:dd:d1:76:47:01:0c:71:41:56:bc:ee:05:8a:c3:e7:
35:b3:0a:f5:29:92:c1:94:17:ec:72:e2:48:8d:b5:dd:12:96:
6e:bd:bb:9c:4f:f2:cb:98:f6:f1:d3:3f:d7:02:1c:2e:47:ca:
41:ff:98:6d:dc:1f:e5:3c:a7:7e:18:fe:1e:82:44:5e:7e:ea:
c7:29:77:76:c1:67:bd:b8:ef:3f:72:ef:2c:20:33:9a:8b:91:
9d:db:cd:5a:25:f7:60:f5:28:a1:05:e0:d8:3c:b8:96:04:66:
bc:35:53:0f:f4:36:bd:04:f2:93:c5:ac:8a:77:83:20:bd:9f:
cc:f9:f2:b6:d4:fb:fc:4e:c8:cb:f0:93:02:c6:7d:ad:5f:a8:
f5:6f:a8:a1:91:81:cc:f7:4b:bb:6d:a1:34:63:ac:72:84:b7:
68:e2:98:b3:cd:99:c8:a8:57:62:bb:7e:8c:2c:da:b0:88:12:
ed:1e:9d:54:ca:cb:d1:85:d2:4b:eb:a6:ea:e9:40:1f:36:7f:
83:9b:6a:c2:0c:00:f7:6d:78:2e:1f:78:7e:37:1a:ac:52:f8:
df:09:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:20:48 2025 by rpki-client