Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f71ed9d-68a4-378c-9608-f6821e0963b8.roa
File: 8f71ed9d-68a4-378c-9608-f6821e0963b8.roa (raw, json)
Hash identifier: 1f7SJ6yE7xkddRD5NyqvPp4M1eOJiZLPM+b5ZKgIoHg=
Subject key identifier: 38:9A:8E:4B:FA:37:CA:21:1A:85:CF:CC:06:E8:5C:CE:C2:B0:11:67
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1BD176B33AD28B04E08200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f71ed9d-68a4-378c-9608-f6821e0963b8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.236.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:d1:76:b3:3a:d2:8b:04:e0:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2a22af16-2c2b-479f-8657-86e9c7d133c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ba:24:c8:ce:0d:0b:2b:0e:61:73:5d:de:bf:
83:2b:ca:05:ab:76:7b:2f:c6:2c:aa:6c:78:bb:63:
2f:80:30:2e:70:c3:5b:ad:da:23:35:ab:0c:5d:3e:
5c:95:b5:30:c9:fc:9e:8d:ca:30:21:f1:2e:ae:c2:
1f:36:22:34:0e:9b:86:2c:1a:e9:17:5e:5d:e0:19:
da:00:07:16:00:84:8c:d2:80:62:a6:f1:2b:d0:cf:
17:25:a4:e2:a6:12:81:1e:cb:20:1d:65:59:96:c9:
34:51:9d:2f:0c:76:e5:5e:06:9f:16:d4:30:a5:c4:
4c:f5:34:51:88:a9:b9:b6:3d:e1:83:4b:bd:d0:00:
81:d6:17:2c:11:ea:fa:5b:68:5c:f0:1c:74:ff:7e:
47:d3:62:60:36:45:b6:64:42:b6:d0:b9:2b:f2:c6:
85:51:a4:ec:74:63:c3:68:59:cc:89:d6:92:fb:9d:
80:ba:2c:ba:1e:43:4d:63:be:79:63:d7:a8:2e:d0:
7d:f4:1d:43:33:03:ca:70:5c:c6:0a:77:3a:08:4e:
60:77:38:b1:b1:64:74:35:a1:02:ff:45:6e:9f:c5:
fa:c9:80:91:24:ec:9e:d6:61:44:0b:d7:a4:3c:67:
9c:ad:a1:3d:2b:4e:79:1e:28:6a:07:95:40:91:1b:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9A:8E:4B:FA:37:CA:21:1A:85:CF:CC:06:E8:5C:CE:C2:B0:11:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f71ed9d-68a4-378c-9608-f6821e0963b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.236.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:bd:f9:e8:f7:07:77:d9:60:c4:82:89:8b:ff:06:a8:34:53:
5e:09:0e:6d:87:e8:6b:c7:a1:a4:81:5c:ea:90:c6:ed:83:25:
a0:ee:83:bc:50:36:8c:49:ee:85:b4:82:9c:16:25:f9:1d:4f:
c1:45:fe:0b:dc:bf:b6:3e:c1:73:10:7c:aa:2d:c1:b0:93:4a:
cb:e1:d3:2a:bb:21:a9:c9:1d:1f:a8:e7:cb:ae:99:a6:85:67:
d1:32:58:51:13:7c:a6:91:67:ba:78:30:2f:ad:af:c6:d7:13:
e4:dc:46:f6:50:75:b0:29:17:93:01:06:27:bb:61:1a:00:1d:
99:6f:29:99:85:43:5f:db:ce:d0:81:52:83:a6:34:66:09:18:
02:36:d0:4e:3d:b4:65:80:7f:d6:07:2e:b6:e5:03:db:aa:23:
59:98:ba:0f:bb:a6:82:ce:5b:85:4f:fd:10:d0:91:29:27:87:
ce:7c:2b:a7:fe:71:59:b0:41:14:a5:02:68:1d:f1:22:95:54:
4d:4b:a4:4d:26:06:bd:af:53:93:1f:75:6b:e1:cd:ee:7a:b4:
ab:c1:b3:b1:6d:df:0c:67:36:0a:07:d8:ec:51:60:ac:9c:2e:
81:20:4e:dd:79:1c:4c:e2:f7:68:e2:58:b0:cd:46:99:bb:d4:
95:6e:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:12 2025 by rpki-client