Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78d48f8d-1e91-3a59-a58c-5c33aa6008a2.roa
File: 78d48f8d-1e91-3a59-a58c-5c33aa6008a2.roa (raw, json)
Hash identifier: jOVgmU8e7jmuHvi40+rmHRxptqblLCmhQKdDWtc1X0I=
Subject key identifier: FF:CB:71:CA:2F:75:8D:1A:1C:9D:3A:EF:32:FE:3B:89:7D:44:D4:F7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EDF166045CA904105D7B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78d48f8d-1e91-3a59-a58c-5c33aa6008a2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.196.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ed:f1:66:04:5c:a9:04:10:5d:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=84bc4be3-d681-4d81-a5c1-386a7672e013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:14:af:15:1e:92:e1:8f:13:12:4f:8c:ad:
0b:aa:a9:35:cd:0b:65:63:3c:af:ec:e4:1f:f1:d3:
b2:39:b4:f9:c7:5c:84:31:fb:10:7e:0e:d7:12:87:
19:21:d2:6f:f1:e3:c7:6e:ef:c3:17:f3:29:5f:d2:
2e:fa:81:de:89:75:11:44:e4:46:90:30:ce:9e:55:
4b:81:86:33:95:6e:57:25:29:a6:fd:5a:f8:d8:98:
3d:3d:24:68:97:f3:5b:cc:42:7a:a7:45:10:4f:4f:
42:dc:5b:cf:cc:85:d7:56:78:52:0d:7a:39:d5:a4:
f1:6d:12:1c:16:37:4a:5f:c3:03:23:05:27:ba:4e:
0f:7d:94:68:e4:80:06:6c:93:bc:b7:27:73:a2:b3:
a1:19:5d:60:0b:18:4a:b5:c4:47:1c:6c:99:d6:09:
88:7a:be:1f:2c:36:ba:1b:c3:02:5b:20:89:d8:03:
c4:90:13:58:2a:85:a5:c2:bf:b5:60:4a:1c:9e:f8:
92:3d:87:c8:e7:cf:bc:da:52:1e:f4:45:c6:60:01:
eb:0c:79:8f:49:c2:e3:62:7c:61:bc:8c:09:e5:24:
13:56:f0:ca:6f:8f:8f:eb:72:c3:a9:04:bd:fe:9c:
f2:3a:00:b6:53:b5:fb:8b:66:72:c3:5d:3b:4f:ff:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CB:71:CA:2F:75:8D:1A:1C:9D:3A:EF:32:FE:3B:89:7D:44:D4:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78d48f8d-1e91-3a59-a58c-5c33aa6008a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.196.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:e2:e2:86:93:a9:2d:7d:e1:e3:02:9b:00:70:aa:7b:09:a7:
4e:c3:e4:a1:3f:88:42:b9:d1:ae:e0:6a:d7:5e:45:1e:63:83:
86:cb:71:24:d7:6a:8c:2d:4b:e1:a6:ec:dc:bc:35:a4:c9:9b:
96:2d:03:44:89:df:a5:45:69:0b:0b:f7:11:99:d7:f6:1d:db:
17:cb:45:25:b7:e8:07:99:45:0f:9e:d9:6c:e1:e2:94:d0:28:
a8:8d:77:0c:cf:0f:da:bb:cf:30:1d:f7:8a:26:18:79:f6:3b:
9d:be:82:40:09:14:a2:d5:99:a8:af:e4:03:37:79:24:7b:ab:
5a:9b:06:28:64:5a:be:ca:83:31:d3:97:b7:e2:61:ec:df:fa:
8e:fb:22:44:02:e1:fc:5c:ed:88:d4:ac:aa:a2:f1:7d:8e:e8:
1f:2d:00:4e:b4:0e:d0:1d:29:11:6f:77:db:89:2f:b6:ee:33:
0c:fc:2b:a9:28:0b:2f:c7:42:da:19:e3:f6:ef:b2:4b:bf:0e:
22:98:06:00:5d:e3:4d:d7:0b:5f:14:cb:77:3b:d6:a1:6c:4c:
71:6e:af:80:73:2f:3e:a4:5a:0e:06:46:54:03:75:7d:53:5f:
11:3f:c7:fb:0c:a8:ec:ea:5b:5b:d3:58:4c:33:1b:82:33:69:
a5:54:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:04 2025 by rpki-client