Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e383f92-ceb7-39e3-b374-ba0aa66f134c.roa
File: 8e383f92-ceb7-39e3-b374-ba0aa66f134c.roa (raw, json)
Hash identifier: qrpkzIIQF2Aqvn5VxxDgMduT1UxwMwzHowY42Pw7zDA=
Subject key identifier: D3:1A:31:55:A6:A9:8F:4D:4B:05:83:88:6D:F9:94:1B:A1:AA:7E:B8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0C60F651378D1BCC87CAC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e383f92-ceb7-39e3-b374-ba0aa66f134c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.237.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:60:f6:51:37:8d:1b:cc:87:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=74b9404d-ce49-48cf-9453-e680e9b00e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:8b:f6:2e:e0:77:58:24:a3:cb:dd:a3:ba:
1f:6e:eb:46:57:76:44:6f:3e:05:98:cb:3d:15:42:
89:09:a2:4f:d4:9b:8e:bb:aa:1c:e5:c8:c9:c3:52:
96:77:1e:6b:2f:b1:b3:c8:1c:23:d7:3e:7d:db:dd:
b6:d1:30:d0:0d:b6:61:2c:c1:17:06:20:03:71:95:
4e:17:9d:b1:65:af:1c:2e:7b:72:2e:31:35:03:2b:
fc:cf:5a:ba:e2:55:d4:cf:8c:05:60:21:e7:fa:28:
01:70:0a:d6:b5:19:dc:31:0e:4f:66:0b:be:0a:36:
24:ce:cc:ae:24:b6:ce:a8:92:6b:04:06:b2:a2:79:
fb:be:e6:6b:25:a5:e7:af:f8:b5:9a:d8:38:4b:26:
5d:52:5f:33:13:40:b3:2c:18:c0:4f:88:5d:ec:e9:
6d:05:3c:2c:7a:36:e5:dc:9d:06:7b:af:45:10:bc:
8a:a6:9d:c8:9a:de:06:6c:2c:13:d6:72:b5:a0:74:
7e:13:19:7b:fe:f5:e8:04:21:09:69:e2:8f:97:18:
cb:00:f8:be:1b:1f:3c:b9:fa:29:25:f9:12:92:a3:
2c:85:b1:43:b9:e2:6f:4b:22:88:1b:ea:37:3b:27:
3b:f7:1a:1f:93:12:cf:7a:d7:33:d6:3f:0c:63:fc:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1A:31:55:A6:A9:8F:4D:4B:05:83:88:6D:F9:94:1B:A1:AA:7E:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e383f92-ceb7-39e3-b374-ba0aa66f134c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.237.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:34:20:52:22:c0:4c:32:81:92:46:1e:22:47:a1:88:e4:b3:
0b:1a:85:95:df:49:c3:2f:9b:7d:f1:fb:61:52:11:07:0a:bd:
2e:7c:de:a1:41:0b:f3:85:4e:a6:49:ab:af:1e:03:11:c8:46:
d2:01:44:5e:d6:56:cf:8f:32:51:94:c0:52:11:86:c4:57:ba:
07:1f:d2:bc:24:6f:79:75:63:25:0f:92:6f:32:bc:c8:3a:0b:
c1:6d:8d:ea:f1:f4:12:31:53:18:be:bb:60:12:ae:ce:f9:58:
47:bd:af:8b:69:9c:20:e4:84:e7:db:92:66:e3:20:22:f0:8c:
b5:cf:7a:7b:7c:cb:48:b2:57:9a:45:b3:14:8e:2a:b9:ea:67:
14:08:4a:63:ce:23:fa:fe:09:9e:bd:4c:71:fe:f8:09:49:49:
9a:0e:14:62:ad:93:5e:27:e7:98:77:91:1b:e6:5b:dd:af:5a:
b2:2c:40:4a:26:36:63:23:4d:14:dd:7c:38:cb:eb:65:77:71:
9c:65:1f:02:b3:0a:32:7f:eb:ce:31:a1:01:c2:05:25:05:94:
88:99:44:db:82:fd:28:f2:12:b3:68:59:5a:a2:37:6c:d6:17:
6a:a2:0e:71:bc:9e:d1:ed:f7:5f:b1:96:bc:38:c3:a6:82:c4:
58:15:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:54:25 2025 by rpki-client