Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/97d624c2-6581-3259-86f2-e5c0f6533e58.roa
File: 97d624c2-6581-3259-86f2-e5c0f6533e58.roa (raw, json)
Hash identifier: rzboZEmYl3nDQJLTCF7eJ3i+MMxVZhPd52AQsFO9QJo=
Subject key identifier: A1:AF:61:BB:84:99:85:1F:BF:70:5C:C9:C7:BE:D2:ED:58:8F:AA:99
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1BF35CA7868C77918C6E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/97d624c2-6581-3259-86f2-e5c0f6533e58.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 35.199.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:f3:5c:a7:86:8c:77:91:8c:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=78b3183b-e511-467b-95d6-be79ba2d50f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:ae:ec:3d:ec:f5:98:f5:29:3f:67:53:a9:
39:ac:7b:73:78:61:3c:bb:3a:51:41:58:f2:75:05:
ff:c2:63:87:f3:7f:25:ab:1b:49:73:26:f5:db:f5:
a1:6b:bf:bb:d9:64:8b:52:d6:22:ed:42:fe:d9:f5:
f5:c7:57:26:cd:64:45:9c:3b:ab:df:31:10:58:53:
bd:74:01:e5:25:c7:fb:ed:45:bf:2c:38:65:84:00:
40:10:c3:f5:0d:10:02:1e:85:99:2a:c8:4f:14:3d:
87:e2:68:08:82:39:3c:6b:47:42:a1:98:7a:45:2a:
b3:e3:14:a2:05:b4:3d:fa:46:a5:7a:97:d3:e4:da:
0c:fd:10:a4:db:0b:fe:77:f8:d5:2f:64:d5:a1:38:
23:ec:95:3f:d7:6a:9d:97:6e:34:1f:79:c0:2d:27:
ca:8e:22:f0:c6:84:c7:1e:af:92:d8:43:b0:7f:a8:
98:14:db:2c:44:c8:e8:ce:0c:00:9e:44:a3:05:b3:
c4:b9:17:6a:4b:41:28:fa:2d:3b:de:17:87:01:84:
7c:4d:ff:02:f8:cd:47:80:54:c4:b3:80:bf:04:6b:
d2:d5:79:06:30:d8:eb:b7:52:a1:df:ec:18:b4:cb:
a5:f7:e5:1f:32:14:d6:44:36:92:99:de:05:96:40:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:61:BB:84:99:85:1F:BF:70:5C:C9:C7:BE:D2:ED:58:8F:AA:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/97d624c2-6581-3259-86f2-e5c0f6533e58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.199.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e7:f6:c7:24:28:49:bf:4e:62:23:90:02:dc:54:d8:21:51:
da:0d:4f:04:93:24:be:78:20:8a:8c:90:4a:74:e6:94:f1:23:
76:43:88:ca:19:0e:1b:37:b7:b9:e9:c3:39:a9:d1:ec:ba:7d:
d4:83:05:2d:64:10:4b:18:f5:60:2d:06:ef:df:24:dc:a3:66:
9d:58:a5:17:39:e1:d3:82:c5:b4:eb:87:68:4b:9e:f4:c6:59:
12:bc:67:e4:01:50:33:18:8f:d8:12:a5:47:7e:be:94:28:61:
20:07:fe:5e:45:66:ba:97:16:c7:e8:bd:7c:73:5e:b0:84:a1:
13:7b:d5:3d:fe:a4:47:3b:a6:ac:58:c6:3f:14:40:04:bb:e1:
03:fd:94:1f:c3:eb:dd:bc:0b:f5:a4:3f:ca:79:a5:98:2a:e3:
e5:98:ad:81:c7:c1:de:c1:49:a4:fa:7c:47:a2:c3:d4:16:2f:
65:0a:71:79:01:19:7a:b5:85:fe:23:31:d2:0c:07:17:97:bb:
33:cb:d7:59:0f:f6:cb:6e:8a:b1:d1:b4:aa:35:c6:11:0f:ee:
41:6e:0f:0e:c7:35:12:6c:8f:c7:04:95:f2:3f:21:da:5c:fc:
eb:96:f5:fd:4a:d1:f4:16:d2:88:64:ec:e9:2c:5d:23:a9:84:
28:fc:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:40:42 2025 by rpki-client