Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98355257-30c7-3264-bfc1-3e135e6d866b.roa
File: 98355257-30c7-3264-bfc1-3e135e6d866b.roa (raw, json)
Hash identifier: 29U8bsE32VCDFIRmo6a95jI+RSIRHZP+rN4pb2c8xkM=
Subject key identifier: CA:36:FB:89:9C:21:2B:8E:A5:DA:2A:BE:F1:C6:44:61:70:76:61:3C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F5C4FFED712B4611E6FF40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98355257-30c7-3264-bfc1-3e135e6d866b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.188.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f5:c4:ff:ed:71:2b:46:11:e6:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5d79d62f-ea85-414f-88b1-3c5640a84223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:34:43:fc:2b:69:e8:be:46:db:c7:b5:68:
62:b0:f3:90:03:57:0e:47:df:b2:00:8e:26:f2:a3:
2c:1b:79:42:50:0c:a3:e8:97:5b:80:7e:37:b4:7b:
b8:9e:c4:4d:62:38:66:87:16:87:c5:9f:60:b2:d1:
df:ac:9d:71:bf:48:21:b8:ef:20:d6:f3:45:70:67:
69:46:a8:73:60:b4:a5:a8:de:5a:dd:f4:e3:8b:ee:
e6:32:a7:5c:32:83:76:66:17:3b:14:c6:f9:4a:4f:
71:5e:50:7d:56:05:11:02:04:df:69:68:5f:0f:f9:
b7:1b:85:04:4e:b6:50:57:77:b1:83:ad:d4:d7:63:
c3:47:3f:67:96:f2:b6:b7:ba:5d:85:07:72:d9:40:
79:d6:39:56:08:17:9f:2f:e7:54:15:1f:70:40:a5:
b2:98:15:1a:3d:f0:ee:87:d1:36:94:74:e8:2d:62:
1b:ad:73:0d:7c:67:4d:7a:0a:76:c0:b0:ed:b4:fb:
bb:31:8b:61:6d:53:e1:cf:1d:1a:d1:43:05:b9:27:
38:f4:38:46:8b:da:dc:5e:5f:5f:d8:d3:b2:8b:00:
5e:dc:7e:3e:81:83:ef:4f:7e:63:fd:b5:31:2f:e0:
0a:da:14:22:b4:60:68:42:28:8e:07:ab:da:91:1c:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:FB:89:9C:21:2B:8E:A5:DA:2A:BE:F1:C6:44:61:70:76:61:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98355257-30c7-3264-bfc1-3e135e6d866b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:0e:e6:c7:dd:ff:a4:78:d0:27:ea:3c:90:d8:f4:cf:35:4d:
2a:4c:fe:0c:a6:b3:56:eb:24:e1:f0:ea:f5:b2:bd:7c:0a:38:
ef:5d:25:99:c1:ff:e2:09:47:f0:fc:fb:3b:d8:13:42:1d:a8:
e5:46:77:27:c2:1d:ec:c2:9f:bd:ab:aa:61:64:7e:ea:27:9a:
e8:65:e3:ac:18:1f:85:c7:c8:38:d6:2a:d2:4e:7b:bf:d0:70:
6a:3e:19:1d:f2:29:6a:8f:d6:64:90:9c:ba:0e:90:73:89:88:
d7:a4:c8:b3:66:49:59:70:4a:f7:d1:2c:55:02:ac:31:65:e3:
df:0d:7c:ca:ac:fa:4e:be:74:30:df:21:ec:89:16:68:23:e6:
40:93:1c:da:0e:83:42:66:f1:18:1f:b4:9d:62:ed:a6:8c:33:
16:96:bd:7f:74:3d:f6:74:7d:5e:3a:b5:41:6c:cf:32:9c:6f:
99:af:d5:21:55:48:e7:a1:66:d3:89:20:14:53:e3:2d:4b:b4:
da:d9:ff:81:82:69:bb:26:8c:7d:28:51:f7:11:fe:47:57:9a:
9f:38:7e:c6:b4:47:b3:1d:ec:9d:8c:2f:e4:f1:a0:be:66:95:
2e:6f:c0:9f:fe:dc:ef:9a:49:87:c6:c1:44:d3:07:d8:eb:06:
38:ea:38:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:18:58 2025 by rpki-client