Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aca2e1b-f35b-3881-9f50-2458028f100a.roa
File: 9aca2e1b-f35b-3881-9f50-2458028f100a.roa (raw, json)
Hash identifier: 5WusfaUlHqKJgL3QnPFXvfTDyNXcm7pyyQZleauA8Us=
Subject key identifier: 79:66:F7:F3:C6:F7:05:D6:69:F3:01:7D:A8:C5:34:64:9D:8B:04:C1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F98539E0BD6A17CB2B5680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aca2e1b-f35b-3881-9f50-2458028f100a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.203.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:85:39:e0:bd:6a:17:cb:2b:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4af1b981-2f0a-48e9-9355-a6a5bfcbf103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:59:98:13:78:f6:cf:1c:d0:fa:53:19:72:25:
ab:c3:9b:95:46:1e:16:1d:b2:b8:17:97:d4:df:5f:
a1:20:57:f9:f2:bb:2f:de:58:cc:12:b1:93:d9:42:
e9:23:9d:d5:b1:f5:4d:03:fe:7d:4f:d6:8b:85:97:
64:76:99:24:26:ea:2e:97:35:38:7c:ef:be:aa:af:
ae:a3:f6:7a:6a:fd:05:8e:47:46:34:02:47:5a:5d:
67:9c:26:e1:0c:5b:8d:7d:65:c7:0e:08:a6:a8:b0:
de:f3:c9:ad:52:5a:50:2a:5d:4b:39:27:00:66:5e:
cb:0b:6f:85:7b:2f:65:d9:48:69:ca:33:49:f7:2c:
38:ed:bc:0c:9e:1d:34:26:12:cb:90:a7:a7:6d:bb:
40:3b:ef:b3:90:61:90:e7:67:ce:a4:a1:21:c6:6e:
00:c5:5c:2d:02:83:36:51:d3:c4:26:2e:0f:bb:45:
7d:63:77:dd:36:0c:85:5d:f2:e7:cf:d6:88:e3:78:
87:87:7f:64:d2:62:80:bd:5d:90:80:78:e8:16:36:
a0:88:80:b6:29:53:62:3b:d3:04:71:63:c1:a5:8f:
ee:ab:9a:47:63:52:0c:bf:2b:70:77:c7:aa:09:2c:
56:f9:6e:3d:8a:de:73:f8:6b:17:ec:4c:6f:30:26:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:66:F7:F3:C6:F7:05:D6:69:F3:01:7D:A8:C5:34:64:9D:8B:04:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aca2e1b-f35b-3881-9f50-2458028f100a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:84:f1:4c:b1:cb:58:db:ff:c2:ad:b3:cd:d3:8a:e0:64:78:
9d:6e:41:75:9d:1c:4d:75:40:09:8a:43:12:13:73:cc:f5:74:
74:0d:a4:65:c6:3f:95:7c:19:00:e4:dd:14:b4:03:45:41:1b:
b8:80:28:be:29:af:64:92:20:50:03:ad:68:df:d6:6f:d0:8a:
9f:5c:58:13:66:ae:80:56:ff:40:bc:57:da:d4:87:b4:65:db:
ff:f8:c9:10:7e:73:8b:c0:a0:ca:3e:e9:fb:00:07:5f:ff:12:
6b:1f:6e:a4:f9:53:f9:3f:17:71:a1:33:38:16:2d:a5:d8:2c:
ab:f1:59:d0:c3:2d:93:31:7f:fb:0e:1b:39:0f:36:08:90:70:
36:cf:22:72:8f:f1:a6:e4:62:57:cc:88:79:25:75:89:44:27:
c9:9d:70:57:af:42:3a:df:a7:e1:d3:e1:7d:f4:3e:6a:65:fe:
8a:06:2b:50:36:01:ec:02:de:3d:03:30:02:60:6a:41:5b:57:
d2:a3:c1:cf:54:0a:38:52:44:dd:40:44:68:97:65:d3:52:bf:
27:91:2b:07:ae:da:a4:06:30:66:ef:d0:ab:20:3d:af:72:2c:
bd:a9:00:19:93:66:bc:31:1d:b5:3a:16:83:0f:9a:f1:31:60:
db:e9:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:53:14 2025 by rpki-client