Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/946819a1-5d91-3cee-8ae6-6c6adb74a3b2.roa
File: 946819a1-5d91-3cee-8ae6-6c6adb74a3b2.roa (raw, json)
Hash identifier: QTg76QuLhr04RfEcQYF7kmTfxLmf7oyT4WQmcLM+1+s=
Subject key identifier: C2:A4:24:7A:C9:E9:46:E8:37:C1:B7:85:E1:F5:9C:EF:28:21:1D:1C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A14809A945A9021515337D0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/946819a1-5d91-3cee-8ae6-6c6adb74a3b2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.188.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:80:9a:94:5a:90:21:51:53:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1aceedc3-ff43-4469-8d18-2432a176898d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:15:f4:ce:7a:5e:7b:75:6a:33:e9:8a:2c:
08:49:ef:87:e5:76:c1:85:c3:84:c9:2a:04:2c:aa:
01:91:08:51:d9:8a:dd:ef:cb:72:a8:39:0e:71:98:
39:67:d0:be:15:1d:e4:2b:57:40:6c:f3:6e:b0:8a:
15:50:9f:37:8f:b0:08:45:3c:a0:f0:b3:bb:a1:c2:
0b:8a:4f:80:da:19:e4:84:2a:bd:13:f5:ea:8b:61:
49:ee:f1:51:97:5d:a7:14:28:af:91:17:f7:38:ad:
bb:9c:92:90:05:4b:3f:a6:0f:59:fc:65:4e:6a:4b:
e2:f3:6d:79:e2:31:13:ec:76:3c:c9:89:d7:5d:2b:
d4:5b:52:af:59:2d:2f:6d:fd:88:aa:0e:a6:41:3a:
6e:a9:a2:c5:5a:48:d0:dc:74:71:ec:48:ad:9e:db:
13:c6:7e:cf:a8:03:f1:75:a0:dd:c9:35:0b:09:79:
22:44:1c:bc:06:98:92:ec:3d:7e:a4:84:b8:96:59:
47:b2:6a:45:83:21:51:2b:50:c5:81:4a:aa:4c:94:
a8:c6:6f:1c:c3:06:ad:86:29:31:24:78:3a:c9:ca:
4f:76:34:9d:8a:b9:bd:3b:95:7f:b5:75:a5:55:2b:
70:51:a2:84:0e:d7:52:19:ae:96:15:12:2a:5b:3a:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A4:24:7A:C9:E9:46:E8:37:C1:B7:85:E1:F5:9C:EF:28:21:1D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/946819a1-5d91-3cee-8ae6-6c6adb74a3b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:a3:90:68:e7:b7:eb:69:fd:68:3d:16:8b:ae:04:76:0f:df:
0e:41:ca:28:13:80:1e:19:a1:12:9a:03:9a:69:48:a6:ba:be:
32:57:34:89:c8:eb:cc:d7:73:91:f6:35:af:18:6f:e4:5f:83:
eb:bb:aa:1b:41:38:db:5c:2d:18:65:a6:13:23:df:a3:6f:a8:
fc:4e:7a:3a:c4:2a:96:81:e8:5d:95:aa:43:e4:11:2f:22:31:
79:74:6b:01:e7:50:f4:38:5a:e1:bc:76:e7:bb:00:2b:e6:72:
9f:76:65:ed:ca:52:aa:19:ad:5a:61:fb:6a:b7:88:7c:eb:0d:
ea:83:bd:2f:4a:38:3e:4f:f9:78:90:e9:cb:8b:63:12:02:e0:
f9:3e:a2:32:e9:28:2f:00:70:56:61:3c:a0:70:aa:e3:d1:5d:
32:f9:df:c7:1a:ff:dc:7d:f5:e8:cb:52:c7:c7:db:08:62:88:
af:d4:91:8f:bc:c7:94:93:65:d9:a7:67:03:a5:e7:65:f5:41:
ae:54:51:76:44:3a:78:3b:c7:a0:57:4c:87:7e:3d:9f:1a:dd:
01:32:c5:d6:eb:a9:59:7b:6e:64:8e:98:58:56:fd:4f:ff:4c:
03:d5:b1:d2:9a:8a:d7:94:d8:cc:23:83:26:fd:5f:4e:62:0f:
ae:18:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:01:13 2025 by rpki-client