Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d1842d7-e6fb-3729-a006-a1e626714549.roa
File: 8d1842d7-e6fb-3729-a006-a1e626714549.roa (raw, json)
Hash identifier: lv9cC6w1v/bULBzvIjoXJxkO+f9+9JhODSDwUoA8FSk=
Subject key identifier: 0F:8E:DE:28:63:37:E0:75:9C:BB:88:88:99:06:B4:8F:E2:BF:2C:86
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0A83B767B5E075BBEF4F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d1842d7-e6fb-3729-a006-a1e626714549.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.243.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:83:b7:67:b5:e0:75:bb:ef:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7fc0861c-97df-4641-b921-c99c0adedb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:fc:0e:c0:16:9c:91:84:e0:c3:25:50:6b:
1c:c6:3b:e3:df:b1:ff:31:4d:9a:a1:45:2f:c4:01:
b1:9e:d5:7d:e7:9d:37:ca:76:0c:da:71:37:d0:5b:
4e:0e:df:3c:02:54:61:0d:e3:d3:a5:57:75:f7:3b:
42:a6:bc:16:1d:91:ef:2f:fe:b9:90:a7:80:13:ef:
42:3c:cf:ea:c5:b8:ed:23:db:5d:05:73:85:d0:7b:
4b:f0:3c:62:a9:f9:1e:47:5a:6b:78:13:40:5c:fe:
cc:ad:24:57:52:81:e0:9e:5b:85:98:ad:8d:01:d2:
9e:10:cf:32:ad:21:ea:16:48:75:53:fd:f9:ce:08:
e6:7b:14:42:e7:f3:d4:34:30:4a:48:16:40:bf:d3:
ea:f9:2d:f7:f1:35:e6:f2:f1:af:67:0b:15:89:78:
b7:be:3c:43:67:b4:19:6c:95:44:6b:12:92:5d:a3:
28:34:1b:df:88:d7:c8:a8:7a:69:c2:0d:c7:c7:6e:
70:35:4c:79:23:e2:fd:20:1a:08:af:c1:c4:3c:82:
cd:73:f4:54:39:c6:24:a6:b6:b5:76:35:c9:95:e9:
32:60:13:61:82:de:b0:1b:16:6b:c4:98:05:0c:04:
70:40:5c:76:a7:14:07:de:a7:48:d6:de:6e:41:88:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:DE:28:63:37:E0:75:9C:BB:88:88:99:06:B4:8F:E2:BF:2C:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d1842d7-e6fb-3729-a006-a1e626714549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:89:90:c0:eb:b3:4c:50:4c:5f:0a:03:fc:59:9a:a9:8b:54:
f7:60:17:b7:50:40:38:69:2f:ae:79:a6:d6:ef:44:8a:59:e8:
35:93:f3:7e:89:1a:c4:27:af:a5:7a:18:41:9b:14:be:cb:bf:
1a:5b:83:5a:b4:92:ba:72:a2:5b:c9:e8:f1:6f:bc:cf:30:ed:
0e:cc:e3:04:ce:de:9d:43:94:bf:39:3a:f1:d6:95:6d:15:4e:
94:3b:bb:ed:5d:8f:59:31:bc:8e:1c:b3:c9:8b:e6:f9:a5:9a:
f4:e0:01:8d:71:ed:50:8c:39:fa:49:91:92:6e:df:b0:76:0b:
cb:50:72:3e:21:f1:a7:87:93:3a:71:a2:4c:fd:0c:b5:18:e3:
ce:af:be:ba:b9:2c:c6:c7:c0:b0:36:4d:52:6b:5c:22:b6:ed:
e0:fa:d2:84:ac:fb:75:20:58:a3:a8:06:4e:fc:42:26:3b:b7:
95:07:28:a3:ca:a7:bd:a7:21:5b:84:09:a6:c9:fc:49:4e:92:
e0:95:76:b7:4e:50:e7:d4:82:6e:fa:de:52:4d:87:dc:19:76:
d9:33:e0:0d:2e:f9:bf:a5:b6:7a:8b:2c:60:bf:08:d5:91:cd:
99:69:0b:5a:da:da:ef:07:99:fd:ea:0f:9b:74:e9:1b:d8:93:
48:62:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:53 2025 by rpki-client