Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7605d3db-33c1-3f1e-83b2-46779eac1619.roa
File: 7605d3db-33c1-3f1e-83b2-46779eac1619.roa (raw, json)
Hash identifier: jTTHt+Iqm5y6UFdFuhqo0Mop/UsmNTmD8wrYOkkts2g=
Subject key identifier: 4C:58:7E:73:49:9E:EC:9E:ED:87:93:B9:66:BB:94:05:9C:6F:F0:EA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1C5A2EED280EABB1201980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7605d3db-33c1-3f1e-83b2-46779eac1619.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.220.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1c:5a:2e:ed:28:0e:ab:b1:20:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fc7f7fe5-7c2b-4f5d-8eff-2ae8168f784a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:9c:16:4a:00:12:b2:bf:34:70:7f:19:bc:
5a:71:7d:cc:f6:49:e2:b8:94:a4:34:f2:54:95:98:
5b:dc:db:fc:82:6f:ac:36:6e:5a:b0:e4:c6:cc:fe:
96:52:30:c4:52:39:6c:a6:f2:1b:9b:4d:a1:0f:6b:
74:36:d0:8a:68:b4:cd:a4:2a:e8:25:3c:a0:e9:05:
28:b0:50:b7:fa:eb:28:39:fb:fc:52:63:d0:e7:68:
18:83:03:b7:c7:6f:cb:3b:9d:ce:9f:cb:85:8d:27:
92:de:8b:ca:aa:c5:59:8b:9b:2c:a1:40:11:71:3a:
99:b0:76:1b:6e:b3:fe:ae:25:2e:24:b0:fe:ce:f8:
c4:47:1d:5b:63:16:16:2e:a3:53:e1:db:3d:6c:6e:
56:26:29:08:0b:56:fd:45:0a:bd:dd:2a:9e:04:bf:
53:bd:85:6e:4d:1e:18:aa:73:b2:9a:81:23:ec:b3:
65:04:3b:ff:7f:f8:c5:f0:8a:a5:fd:78:29:cd:5a:
3b:93:a7:00:21:d2:26:9c:92:b8:fb:f5:29:49:7e:
e7:49:27:9b:d0:07:b4:01:9a:f8:1e:ce:a6:7d:c7:
08:cb:03:b1:7f:19:74:cd:a7:fa:ea:87:ee:ec:7d:
34:25:62:65:8e:6e:34:ba:b2:63:a4:4d:81:a1:b2:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:7E:73:49:9E:EC:9E:ED:87:93:B9:66:BB:94:05:9C:6F:F0:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7605d3db-33c1-3f1e-83b2-46779eac1619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.220.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:12:5e:f9:85:64:f4:0a:95:91:8a:ec:49:9b:f4:0b:e1:ba:
10:28:e7:2a:97:c7:a7:c9:de:f9:df:90:60:9c:76:67:4e:87:
f1:fd:8e:25:02:5c:56:ea:f2:07:3d:c4:c3:79:f8:17:ef:05:
8a:1c:b9:ba:ab:e2:7c:36:f7:2e:b0:06:a9:16:f6:16:95:a3:
f4:2e:3f:4b:2e:25:b8:c2:65:80:2a:24:b9:7c:40:e1:8e:c2:
f8:af:41:c0:4e:27:c8:bb:43:9e:6b:e0:d4:3f:73:b3:fa:30:
1a:c7:10:f5:13:56:da:9d:d4:41:49:fd:5a:46:57:69:05:7f:
fd:e2:8b:7b:d9:86:8d:8b:f8:68:be:c8:03:ff:a4:40:b9:dd:
a9:dc:0f:9f:41:dc:ed:cd:80:93:49:f7:dc:0e:29:1d:bf:fd:
a4:85:b6:84:fb:1d:bf:e7:c4:23:fe:fc:7c:d8:bc:27:ec:ed:
83:23:81:05:46:95:0e:2e:eb:3c:00:b7:65:a0:29:00:3e:fc:
84:e7:0a:c6:87:38:8a:27:62:a4:b3:fc:a5:a0:05:d5:80:a6:
b5:de:2d:1b:33:f5:72:a0:c9:03:11:ef:98:66:89:1c:b2:c7:
7a:5b:de:66:99:de:80:ac:89:06:c7:70:fa:a4:6a:a8:09:68:
c1:26:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:46:12 2025 by rpki-client