Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a416e898-ef64-3f58-ae3a-551e67b39598.roa
File: a416e898-ef64-3f58-ae3a-551e67b39598.roa (raw, json)
Hash identifier: kj+EZYyJydGt7QB0nLMIpHZQGhnqtyMaBYIShXsUIps=
Subject key identifier: 2F:96:7F:A5:45:5E:77:4D:A0:B8:4A:B2:ED:E0:04:41:E7:D8:E2:B8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A202812FE434C4035A0EBC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a416e898-ef64-3f58-ae3a-551e67b39598.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.225.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:28:12:fe:43:4c:40:35:a0:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fc14a849-cbf7-4733-81a1-9a6e67453bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:ef:5f:11:65:91:af:fe:43:65:fc:95:7b:
99:24:7c:a4:fe:c5:de:ee:80:e8:cc:9f:af:b6:ac:
f3:dc:b0:b9:8c:96:ce:c6:22:92:38:7e:c7:0f:00:
72:80:91:72:25:18:d9:c7:1d:86:a8:db:d5:a8:97:
1d:be:bc:ed:23:84:e8:87:7e:40:7e:45:69:67:75:
26:f3:b0:36:36:81:f0:16:89:17:1c:7e:18:1a:66:
41:96:34:f5:08:05:49:b6:a3:fc:ba:0a:57:87:28:
c7:99:89:4d:98:3e:e4:69:37:27:63:21:71:da:48:
e5:1c:e0:40:8d:27:37:fd:78:65:c2:67:be:10:61:
22:5e:24:62:5f:40:e3:b4:a6:0c:e8:27:cf:b9:ae:
3b:4c:03:db:dd:8d:fb:06:77:98:dc:bc:50:25:7a:
fe:f4:2b:d9:ac:f5:89:74:b6:c7:30:8d:8e:7b:9e:
51:1b:c4:f2:7c:3d:b5:8e:0a:93:44:05:23:50:eb:
0f:bf:22:84:47:d0:89:27:20:94:2e:80:dc:fa:40:
15:21:8d:bb:98:28:89:b3:b0:3f:04:03:eb:02:ff:
9b:fc:95:65:b2:0e:80:99:f3:21:df:1c:b4:02:1e:
73:cb:21:23:17:d9:b1:13:ef:8d:cd:7d:65:a7:69:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:7F:A5:45:5E:77:4D:A0:B8:4A:B2:ED:E0:04:41:E7:D8:E2:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a416e898-ef64-3f58-ae3a-551e67b39598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.225.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4b:71:24:21:a8:89:0c:d1:c8:64:7c:74:63:68:82:b1:1f:
d1:2e:ad:48:34:20:7e:ea:28:0a:24:79:ac:bd:dd:6e:65:12:
39:bf:07:f1:50:ed:c5:61:5e:b1:c5:3f:db:3c:2c:01:6c:a6:
9e:41:4c:57:ba:90:ce:61:7f:5a:b4:86:2b:42:3d:43:be:39:
f3:e4:65:74:77:9c:54:f7:ea:e9:65:80:08:a0:6e:bc:ba:ef:
21:9f:51:f0:cb:27:10:68:22:82:eb:2d:ab:ed:98:4a:99:52:
aa:2f:54:86:89:e4:c3:aa:8e:b4:46:5d:dd:fd:02:7a:bd:69:
79:39:57:ef:94:b6:9e:a2:e7:07:de:1c:fc:d8:1c:20:cc:87:
22:ed:62:d4:b1:bf:36:04:6c:bb:61:d0:a7:ff:6a:51:ee:6d:
dc:18:49:1d:04:5d:3c:61:8f:6e:78:03:33:a5:4d:7e:ed:f3:
2d:4d:fd:f3:2c:89:88:8c:96:8a:6f:a1:f9:25:d3:72:65:ce:
cb:da:ab:a6:51:a2:99:30:02:3d:f9:38:ae:2a:d9:e0:f8:46:
52:5b:a0:b6:15:b3:6a:01:a4:84:02:76:32:73:9f:a4:b9:de:
f6:03:98:a8:73:7b:12:2f:b1:c3:35:52:87:2b:35:bc:9b:8d:
c4:b5:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:00:43 2025 by rpki-client