Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72f6b801-11ed-3fca-b567-bac6de206f5d.roa
File: 72f6b801-11ed-3fca-b567-bac6de206f5d.roa (raw, json)
Hash identifier: 2o5kO/YgRTRJizzVhpI88esrex/M1wUsWkmD1PY5YUY=
Subject key identifier: FE:CD:06:29:6F:52:1B:1D:BD:1F:80:60:52:F2:07:5C:1F:94:39:71
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A05DF69EEBFE2EE2DF93820
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72f6b801-11ed-3fca-b567-bac6de206f5d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.190.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:df:69:ee:bf:e2:ee:2d:f9:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2b9bf7bf-de2b-4c79-a404-c11501821056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:8a:65:a1:bb:26:b4:15:0f:31:ca:bf:c4:
51:aa:db:1c:2a:8c:d4:97:06:32:6d:12:67:4e:35:
89:fd:62:d8:a3:1b:69:f4:50:31:4e:16:47:83:7c:
95:ba:8f:46:bc:1e:c8:2a:69:06:d5:c1:be:00:6e:
5f:0d:cd:17:80:6e:c6:fc:4d:aa:ec:1a:5a:63:20:
d7:d2:67:c8:02:1e:91:b7:6e:4d:1c:a2:34:cd:db:
71:c7:f0:75:1c:7e:f7:50:a5:6c:17:80:6c:ba:b3:
39:7b:76:cc:12:5d:cf:2e:7e:20:3b:e5:29:84:36:
36:3f:d7:7c:0e:3a:26:99:9b:41:e2:83:af:ce:5e:
0d:b5:22:a8:5b:bf:ae:de:6b:df:bc:64:7e:d3:91:
5c:f8:29:68:6e:5e:26:fd:59:8f:63:c9:83:9a:30:
ed:24:36:70:a0:9c:d1:ad:a1:5c:24:96:bb:25:3b:
d1:bf:b3:03:7b:35:f7:92:e7:d5:82:4f:1c:98:35:
b7:20:97:ef:1b:bd:30:15:3e:06:26:5c:63:14:e4:
64:b4:c4:18:ca:02:c0:64:49:1d:60:ca:98:c2:8a:
62:52:5d:6b:fc:52:e4:f5:00:13:07:43:06:ac:52:
c9:c3:96:d6:87:41:7c:6f:ae:11:55:3f:d3:e2:40:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:06:29:6F:52:1B:1D:BD:1F:80:60:52:F2:07:5C:1F:94:39:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72f6b801-11ed-3fca-b567-bac6de206f5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.190.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b6:72:48:16:10:55:6a:d1:4d:a5:2f:f8:ef:c4:5e:91:c8:
bf:d4:0e:dd:69:cf:a7:2f:97:1d:be:28:80:7c:66:a8:1b:b5:
49:4a:bd:90:a7:98:3e:d5:5c:93:1e:97:76:2d:4a:32:a0:4d:
3a:e4:65:87:c0:da:12:e0:04:3f:92:c7:0e:3c:ea:fd:b9:0a:
34:41:d2:5e:2a:6e:88:d1:a6:be:f6:57:80:7a:03:60:89:d7:
9c:1b:1f:25:77:5e:7e:ad:ca:68:ee:d3:b2:31:e3:d8:13:1b:
9d:3d:79:02:90:2e:33:3e:5f:b6:b5:3f:ce:5c:d7:79:4b:8e:
e0:89:e5:03:36:0f:57:84:97:e7:bc:6d:a6:d5:a6:e8:4a:ca:
89:8e:2f:b7:23:30:78:0b:c2:5c:04:80:ab:c1:72:cf:d8:6b:
1d:04:44:e7:02:d0:55:44:94:69:ef:6d:71:bb:2a:2d:80:3c:
36:7d:08:92:fa:1f:84:c5:73:f0:5d:52:00:4e:01:ee:46:b4:
26:95:4b:1d:d7:a5:10:12:1f:4c:ed:e5:d4:99:ee:65:10:3f:
f7:9e:e3:8a:62:67:86:1e:77:77:71:ae:a3:99:92:d0:ce:8a:
e1:04:47:ed:1f:f6:73:90:74:24:52:75:b0:b8:35:d8:38:fa:
40:00:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:43:20 2025 by rpki-client