Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3155625-aa43-3a0f-9968-eb1018403ddc.roa
File: a3155625-aa43-3a0f-9968-eb1018403ddc.roa (raw, json)
Hash identifier: TnKNMaqYXJ/C8ffTT4n0tG+C22HwWjidvZO6bu6XKLg=
Subject key identifier: 26:12:58:C8:71:0F:1D:30:40:C0:68:4E:C6:DE:DC:CD:1B:FF:6C:73
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A04896E42AADC850554B280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3155625-aa43-3a0f-9968-eb1018403ddc.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.186.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:89:6e:42:aa:dc:85:05:54:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ae0c3af5-7b23-406c-8569-e8daedf3e8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:54:38:5f:64:b2:fe:20:38:c9:32:7f:82:45:
d2:08:55:cd:36:74:2f:5a:60:ea:21:53:cb:3e:2e:
d0:60:53:6a:e6:db:3b:f0:f0:64:52:e9:2c:6d:e0:
c3:92:e0:00:c2:74:53:8e:a7:ff:6d:49:2a:84:61:
e1:be:dc:4c:1b:39:e7:76:78:c4:76:88:30:7f:22:
b4:5d:6e:d4:69:4e:53:d6:3a:b0:06:03:75:c5:a6:
ec:91:96:0c:2d:83:1a:b3:23:87:df:45:02:a1:ba:
d3:d8:30:5e:c6:d5:f1:fd:d7:0b:38:1c:35:a5:92:
aa:fe:85:23:01:ec:c1:d2:01:98:81:2a:15:78:df:
82:74:e4:34:43:c1:8a:fe:64:2f:76:79:b2:ee:bd:
df:78:66:90:4a:51:7b:a1:ca:19:2a:98:e6:44:49:
6d:04:52:63:c2:a5:a7:6c:44:0d:c7:79:54:da:8f:
92:b0:f3:c3:4e:28:05:7a:43:79:89:bf:58:2f:50:
0b:39:62:d9:92:c8:9c:ab:bd:5b:5c:b8:2b:70:5a:
f3:44:a9:ff:0b:31:83:78:49:41:6e:aa:5e:3b:e7:
6d:bd:b6:33:6e:50:27:ed:17:f3:1c:4d:d2:1c:52:
0f:29:90:ea:df:54:df:34:de:17:2e:f0:5e:37:36:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:58:C8:71:0F:1D:30:40:C0:68:4E:C6:DE:DC:CD:1B:FF:6C:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3155625-aa43-3a0f-9968-eb1018403ddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.186.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:6c:ab:a4:58:d1:b0:b5:fe:b4:8e:89:d4:55:f7:d8:76:e2:
9a:55:60:47:a9:f8:52:0b:be:fd:d1:7c:ae:25:8a:cc:ff:30:
46:d3:67:ea:68:2a:dc:a8:dc:ba:6e:53:8b:df:51:4b:2f:e7:
43:38:06:74:21:a7:8d:a0:d1:ad:d6:5d:63:12:d6:ad:35:e4:
7b:a8:fc:7b:bf:27:04:14:07:91:51:25:de:9d:f4:c1:5d:78:
e5:09:88:64:e0:0f:50:20:34:8e:5f:0a:5d:64:db:8e:ae:34:
c8:14:1d:14:90:f5:87:96:f5:0a:84:31:58:b8:00:57:fe:b3:
21:15:2c:c9:52:49:8d:0e:e3:4f:c7:af:d1:ab:16:24:41:08:
44:95:bc:5e:d7:5e:7f:1a:bc:9c:ef:40:ed:d6:43:1a:96:8b:
b6:fb:fe:81:f9:8c:bd:95:b7:50:37:95:b1:3e:89:47:b2:2a:
39:38:53:32:2c:5f:3b:55:f6:33:34:00:cf:07:77:94:c4:e1:
c2:0b:a3:4a:58:20:f3:84:65:8d:05:b0:92:bb:f7:2a:9c:3c:
9d:82:e6:e5:bb:6d:9a:0c:e9:9c:e2:41:49:12:1e:31:6b:86:
0e:11:1b:5d:50:f1:a2:ac:3f:3a:55:f2:97:fe:7e:32:06:72:
a3:b6:90:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:46:16 2025 by rpki-client