Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/678b3897-25a9-313d-9094-99067d5bda0c.roa
File: 678b3897-25a9-313d-9094-99067d5bda0c.roa (raw, json)
Hash identifier: FmppMoFIKZLQFGYylm+6SPMDSeneo7QLf8psNLEg3Co=
Subject key identifier: DD:28:18:9D:E0:94:94:04:02:91:C3:99:2A:3C:7D:23:C0:B9:87:43
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0269EE0E108A5D55B8F500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/678b3897-25a9-313d-9094-99067d5bda0c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.193.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:02:69:ee:0e:10:8a:5d:55:b8:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=65355ba0-549b-4179-84b7-3a0cd9533623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:78:13:c1:dc:2c:6e:b2:91:3a:cb:12:22:
d6:ad:29:50:82:cf:f5:2e:d9:d4:2e:62:14:b5:65:
10:01:6e:8b:dc:e5:00:b2:b2:a6:d9:2a:b1:7e:61:
e6:10:54:36:81:c9:da:89:8c:27:de:b4:ec:d2:64:
96:9c:74:47:6a:12:54:72:9f:a9:2f:5e:8c:58:52:
23:1c:35:a4:19:68:48:49:61:f1:99:d0:3a:26:3f:
23:52:cb:86:76:1b:09:fc:c6:75:3f:2b:1c:d3:62:
f6:dc:f6:74:40:ba:a0:6a:22:00:c8:a4:5e:e2:e5:
5b:13:3d:b7:c5:46:23:f5:93:28:50:f0:35:a3:46:
a2:dc:cc:dc:1e:4b:5a:82:39:6f:f8:3d:74:bf:17:
be:d9:35:71:98:cb:cf:d5:2e:27:bc:ac:20:6c:b9:
16:50:c7:95:30:62:3a:ca:74:d7:1c:82:8d:8d:84:
48:93:c3:5f:b8:c6:0f:ec:f9:cc:e7:53:30:a8:bf:
db:a4:4e:0a:74:b9:91:be:07:eb:c0:2e:e7:cf:b9:
13:aa:39:00:f1:ff:0a:3c:36:15:1a:f2:4b:e6:cd:
2e:d3:83:10:3e:b2:24:00:75:00:9a:33:0d:a4:ce:
5a:00:cb:2f:28:76:98:ba:88:cb:a8:05:16:00:96:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:18:9D:E0:94:94:04:02:91:C3:99:2A:3C:7D:23:C0:B9:87:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/678b3897-25a9-313d-9094-99067d5bda0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.193.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:a9:3d:2d:78:0d:d2:91:7c:8c:66:66:fd:f8:d5:cb:6f:89:
0b:48:f8:9a:f8:bb:d8:a6:7d:96:b8:b8:d6:77:3f:8f:6e:da:
64:69:d8:0f:6c:a4:6f:87:a9:4a:bb:45:71:8f:46:e7:dc:f7:
0d:d3:1a:f8:40:5f:85:e7:a5:f3:0b:a7:37:c5:bf:1d:fa:b7:
68:05:36:be:ab:3e:ff:dd:12:a9:c7:bd:c8:88:a8:78:11:24:
ed:ee:9e:eb:04:65:b1:43:42:e0:37:15:17:90:75:24:cb:b8:
6e:6e:8d:ac:b1:61:7f:05:a6:1d:b1:ce:f1:d3:df:8f:1b:82:
7c:05:93:9f:bc:c4:4d:5c:b7:db:5a:88:8f:8f:9b:8f:4a:fc:
62:98:17:85:6f:75:f5:5b:e6:11:42:b1:15:71:d9:61:42:91:
13:0d:6e:ef:b1:89:7c:b0:68:a5:bd:3a:8f:cf:42:b8:59:30:
43:9b:fc:f3:37:76:d0:eb:71:fb:53:c2:e4:ef:a5:48:b1:f4:
2f:38:47:43:48:a1:9c:be:5a:44:43:fd:b5:fd:7a:44:28:08:
60:96:f7:42:f7:fd:a5:ca:0a:94:63:43:27:53:51:e5:e6:6e:
82:b3:30:bd:b3:35:fa:80:dd:0e:6d:b0:fb:9d:27:0e:64:2d:
b6:09:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:02:29 2025 by rpki-client