Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/743c473b-dbf1-3e8a-bd43-e969e42f7265.roa
File: 743c473b-dbf1-3e8a-bd43-e969e42f7265.roa (raw, json)
Hash identifier: qhdp2S4GWHTJ4jr8oLABTHdbPa9e1KpTmZiKKkXoq2Q=
Subject key identifier: 47:75:0A:4E:7D:70:CA:7A:3B:8C:14:F5:AD:99:58:0B:0F:2A:19:B1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A16A3E0D2477B2400BC5D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/743c473b-dbf1-3e8a-bd43-e969e42f7265.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.187.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:a3:e0:d2:47:7b:24:00:bc:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4b9499d8-1536-4b5e-a0aa-45f309037cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:68:de:73:38:16:47:a7:c9:ad:f5:60:19:
b3:b3:aa:3f:8a:a8:4b:2a:6d:5e:0d:fa:6b:1e:7f:
5c:8c:f6:79:d3:e6:33:85:54:08:43:fa:d0:e0:f0:
03:07:31:ad:ea:4a:f1:a6:ee:57:5c:2d:d9:46:25:
19:11:7f:2b:55:08:0f:0e:b0:81:45:b7:d4:0e:dc:
03:84:41:32:8c:03:a7:16:09:20:e7:86:48:7d:25:
8a:4b:b4:71:f0:c4:89:0e:0f:ac:52:6c:db:c8:f7:
90:bd:fc:09:e1:2b:d7:63:bc:54:bb:23:c1:ff:d7:
f7:1b:73:de:e3:4a:bb:16:68:2b:e8:be:56:b9:01:
86:70:b0:33:bc:e3:c2:fe:8c:cf:9f:86:57:9b:76:
57:9d:08:52:3e:e3:79:4e:e4:96:91:77:e3:e8:a5:
99:a2:d4:c0:54:46:0a:03:4c:18:d4:cb:db:1b:82:
54:85:cb:ee:42:be:0f:21:91:8b:9d:07:3d:2a:33:
51:d1:fa:c6:aa:f1:26:93:44:89:79:13:56:e5:ce:
3c:22:52:55:62:b6:08:4c:33:9f:d8:3c:bf:d4:2c:
36:ab:0d:40:d8:14:3c:96:9a:da:85:a5:b3:fc:e7:
ee:66:ac:ea:85:92:48:65:9f:0e:36:ab:ca:8c:d3:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:75:0A:4E:7D:70:CA:7A:3B:8C:14:F5:AD:99:58:0B:0F:2A:19:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/743c473b-dbf1-3e8a-bd43-e969e42f7265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.187.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:ab:80:b5:41:1c:21:09:77:1c:d6:58:ac:be:0f:50:3c:0b:
f5:2b:f0:1b:09:de:36:00:7c:29:05:4b:5e:99:07:91:0e:c2:
34:de:58:cf:65:c5:e2:07:ab:90:2c:d8:31:d4:7f:6b:d8:b4:
ee:a7:18:75:91:13:3d:25:b0:d4:75:8a:07:6d:7c:a1:39:33:
71:7d:ab:73:28:96:b6:93:5b:f8:91:87:57:47:de:aa:7c:c1:
ca:20:63:1e:57:9f:10:48:72:42:dd:3c:e5:b4:02:bd:81:75:
cf:5d:bd:15:bf:1c:d7:87:d9:dd:17:99:2e:ec:46:cb:16:d0:
56:53:44:cc:8b:d9:c3:a3:d9:4b:68:c0:a6:5b:97:37:c5:f7:
10:49:3b:d0:2f:80:72:cc:81:62:44:7c:f0:5e:5b:62:7a:74:
20:fd:f3:83:15:17:92:f6:b6:c6:2c:f7:79:90:71:28:28:f0:
ab:da:76:16:16:04:ef:9d:3e:76:71:f4:71:3e:77:d4:9e:bb:
e5:d3:75:d6:d1:58:aa:5d:a0:dc:18:97:ab:ad:51:89:54:de:
20:e6:18:8c:1b:39:a6:39:64:f8:43:e1:c7:00:17:d3:92:27:
d2:2c:d4:7a:52:ba:de:86:68:39:b0:e4:53:48:51:12:2e:ee:
bf:8d:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:34:20 2025 by rpki-client