Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e864858-0e0a-3239-afd6-18069921af29.roa
File: 7e864858-0e0a-3239-afd6-18069921af29.roa (raw, json)
Hash identifier: af0Lr45BeMDo4DmL5CF/C6WUTEKniuxnLBOgbrtI7+0=
Subject key identifier: 72:DA:38:88:76:6A:17:34:CD:45:AA:9B:81:B8:7B:07:8C:E8:64:B9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B065F9BA5C1EDE352B370720
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e864858-0e0a-3239-afd6-18069921af29.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.188.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:f9:ba:5c:1e:de:35:2b:37:07:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=d18e819d-e244-44c7-982e-8d5a3b9ea614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:48:93:41:4b:cd:0c:ca:54:27:1e:8a:59:
31:1a:41:a3:91:b2:5f:ce:cc:14:91:16:55:43:25:
75:0d:9d:8b:77:57:da:a6:dc:99:f6:b6:12:ac:da:
aa:2a:62:4f:66:b2:45:84:ca:a1:41:2e:a9:95:24:
4d:8f:ac:90:24:df:e0:e8:77:67:9b:08:be:2d:7f:
30:78:44:3a:21:97:e7:a0:b7:23:56:19:ed:c0:a7:
32:8f:68:b0:2c:9f:6c:da:07:e0:c6:10:7d:1a:44:
52:ae:20:0e:0e:48:88:1e:11:a0:4e:ef:ea:23:04:
49:09:6b:90:26:50:89:9b:39:7f:78:64:76:49:23:
fa:26:b9:ad:4a:6c:9d:37:e1:d7:eb:e6:88:6f:14:
a6:0a:18:25:49:05:17:14:51:10:3d:9b:0f:b2:b8:
34:91:3c:78:9e:26:0a:3c:20:a5:08:42:b9:10:a4:
43:1b:66:18:e0:8b:7c:9b:2c:6f:87:db:c7:9f:3a:
a5:57:a2:ad:70:4e:1a:a8:c7:60:3f:c2:46:a6:d5:
b3:b8:34:29:44:31:00:a8:ef:3f:35:30:62:cb:0d:
1b:2f:5a:bc:f3:41:78:ee:5c:53:31:f6:1b:f3:d6:
09:fd:fe:90:31:78:32:e6:03:e5:fc:d9:0e:0a:a8:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:38:88:76:6A:17:34:CD:45:AA:9B:81:B8:7B:07:8C:E8:64:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e864858-0e0a-3239-afd6-18069921af29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:3e:f3:c9:de:33:77:6d:c2:9c:d4:71:ba:e2:c1:d1:89:9c:
e2:f9:3d:68:58:8a:9c:08:5f:84:7d:a6:67:47:52:60:48:32:
13:6b:11:8a:a9:af:81:6e:4c:1e:df:30:da:3c:4a:be:53:7b:
1a:2a:03:90:c2:be:10:1f:3a:fa:be:44:44:4a:d0:ac:1e:c2:
7d:9c:d7:3c:21:3e:17:a7:50:26:4d:56:9e:41:9d:da:a9:40:
52:82:4a:0b:06:c5:56:c2:73:e9:b3:b4:cf:28:4f:3e:f4:2e:
b8:8e:d8:4c:a3:c4:40:0a:bf:97:d4:66:32:56:46:82:45:e4:
3f:45:e0:5d:67:9c:4a:78:51:61:b8:bb:97:af:b1:3d:60:62:
f0:8d:08:68:79:83:c9:96:05:c0:17:da:54:3b:7e:d7:10:eb:
a0:ba:a4:23:74:6c:47:af:06:23:70:06:b7:ae:04:09:f6:e0:
bf:47:8c:40:af:7c:86:cf:3b:0c:69:8e:56:fc:c3:5f:41:dc:
6e:93:fd:6d:a2:89:03:bc:de:a4:1a:34:2c:ce:b1:71:83:c4:
bb:b3:37:eb:74:7a:db:dc:b4:75:6a:4c:4a:71:f5:f7:11:b8:
03:89:8c:e9:c1:39:33:2b:87:f9:75:12:9f:2a:ce:49:b5:3a:
f7:cb:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:39:56 2025 by rpki-client