Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71cbab47-b9cf-3eaf-b3b8-919b50db57db.roa
File: 71cbab47-b9cf-3eaf-b3b8-919b50db57db.roa (raw, json)
Hash identifier: eT4k2E3+rU+LqJsgv5zsxe16RAk+TL3f4ejo4gG2dC8=
Subject key identifier: 2A:0C:F2:A6:12:14:37:3F:03:AF:B3:18:F4:09:29:C7:8E:F4:7D:F0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A263B92E80CA97437664364
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71cbab47-b9cf-3eaf-b3b8-919b50db57db.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.187.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:3b:92:e8:0c:a9:74:37:66:43:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a09e69c6-1e33-400a-8068-868d2ea80bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:67:6a:87:62:7e:8a:96:95:c1:9b:d0:e8:
6b:b2:a2:2d:23:08:6e:28:7c:21:62:fb:2f:61:bc:
18:db:4b:d2:bb:37:c0:c7:ff:e1:67:36:e7:82:8e:
e4:56:ec:70:84:f4:e6:ae:82:00:27:4e:37:e0:54:
ea:99:8e:81:10:2c:b9:f1:38:d1:f7:76:94:1c:aa:
6c:69:15:55:0b:1e:3d:e3:a5:ba:26:92:95:1b:70:
38:b9:4e:57:58:bd:af:08:44:5d:15:bf:e6:9d:8f:
18:9f:71:76:f4:c3:91:f8:1b:8c:ab:bd:c8:2e:9f:
ab:01:20:ed:79:60:bd:15:8f:f9:74:37:f4:a2:8a:
16:27:2d:18:d7:5d:33:46:12:43:7b:1b:2b:b9:db:
11:fa:79:09:db:37:8a:29:e5:8c:ad:05:aa:89:88:
85:f4:ed:06:9f:06:14:35:6e:f0:a9:57:2a:d4:1e:
87:0d:66:2f:f4:c2:c9:fd:f0:5e:98:c8:4b:14:2f:
34:96:66:0b:05:e1:5b:88:48:69:96:ff:6a:1d:e0:
e7:aa:ea:d5:b0:0b:52:7d:db:3b:3d:e9:01:d3:95:
64:83:8e:72:62:9f:9b:65:50:13:3d:59:38:f2:31:
5b:ad:08:72:d3:e1:db:8b:74:88:a7:1e:68:4f:3d:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0C:F2:A6:12:14:37:3F:03:AF:B3:18:F4:09:29:C7:8E:F4:7D:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71cbab47-b9cf-3eaf-b3b8-919b50db57db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.187.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:36:f4:9e:78:af:b5:f6:43:56:57:e4:58:41:5e:7a:49:21:
1d:4a:8a:af:28:fe:4d:98:0d:23:49:24:6f:75:16:9a:b7:ed:
ef:77:96:06:e8:0f:da:81:de:bd:70:c2:37:40:60:fd:0e:a7:
57:84:a0:99:5a:03:67:67:80:d3:50:38:61:63:64:30:be:ea:
11:f3:4d:0f:08:03:82:f8:ed:0e:71:45:7a:21:85:5c:4f:c1:
18:fa:52:3f:51:09:19:51:59:a4:01:56:e5:ff:f2:96:d7:4d:
d8:f7:5a:e8:61:c8:c0:e3:b7:0d:45:15:35:86:b6:c1:c6:5a:
c3:41:e1:78:94:d4:4d:b4:4c:ba:98:d8:e3:51:0e:0b:f8:c5:
a7:36:1b:17:e2:7c:ec:ae:2b:bc:83:3b:5b:24:b3:fe:06:3e:
d7:02:0c:e9:4d:c2:7e:75:e6:d2:d4:d0:01:84:3b:08:d9:ab:
12:e4:8e:75:f0:b7:09:b9:0f:17:f3:eb:82:2f:45:d5:b1:c4:
e8:79:c6:c6:52:14:e5:32:e3:03:1f:b0:db:af:c5:06:05:b6:
47:fd:d0:32:33:94:f5:31:11:8e:23:cc:0a:a1:9d:5a:65:b4:
07:78:19:7b:78:2b:ab:43:e0:05:6d:8a:ff:f1:4e:b9:7b:c1:
0d:9a:75:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:28:08 2025 by rpki-client