Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6752d38-9004-388d-b027-f01f861ac89d.roa
File: a6752d38-9004-388d-b027-f01f861ac89d.roa (raw, json)
Hash identifier: FUGlAs9Hge2DWk1/6WfJyskKpxMUD6vGjoSwvxbfEGw=
Subject key identifier: E8:6C:B1:78:60:68:84:07:13:C1:7E:D7:4C:90:F7:5D:67:8F:ED:FC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A00DC481C1ED89AF26949D0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6752d38-9004-388d-b027-f01f861ac89d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.220.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:00:dc:48:1c:1e:d8:9a:f2:69:49:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8d0f86b8-a040-401c-8d01-78faa7029ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:d0:38:57:9c:f6:90:8d:23:89:5f:cb:0e:
21:5a:0a:6c:59:3b:15:a7:41:28:e0:d9:b6:d3:a2:
3a:09:b8:cd:9f:2f:42:5b:d7:90:04:12:b5:ff:f0:
15:8a:23:74:02:ca:42:d7:a7:e0:60:eb:4f:af:6c:
d9:d0:a3:e9:2a:bc:d2:5b:34:3f:d5:b8:81:c2:eb:
4b:7d:6b:8c:c8:60:7c:9b:ca:45:74:d4:ff:04:11:
19:9d:bf:dc:84:0f:ab:fc:a2:0a:48:3e:f2:31:34:
50:df:92:ca:99:5e:92:04:71:64:34:e2:36:46:60:
0a:f7:e9:ef:48:10:05:57:1a:ff:6b:54:78:fa:d7:
40:0c:6f:43:68:9d:7f:b9:74:68:39:35:af:26:c7:
54:81:85:d8:cb:7b:8e:ab:dd:f7:3a:7f:0c:27:21:
2c:e1:a2:53:30:b5:f0:03:84:4b:85:4a:12:f8:9b:
eb:c4:5c:9d:a3:ec:67:02:07:85:f3:ef:73:8b:29:
00:56:6f:0d:2a:06:d0:d3:70:df:0a:42:6f:93:38:
f6:db:c7:3e:f9:ed:bd:99:fb:30:d4:dd:cc:ea:b1:
96:61:0d:58:fa:98:df:a1:b7:1f:6b:85:32:4e:3e:
41:96:f9:3d:d0:30:50:c2:70:6f:b0:ae:44:a6:04:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:B1:78:60:68:84:07:13:C1:7E:D7:4C:90:F7:5D:67:8F:ED:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6752d38-9004-388d-b027-f01f861ac89d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.220.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:36:6b:82:dd:a5:00:54:17:7c:c9:f3:ba:a3:0f:86:d7:d5:
8d:76:f5:31:84:32:e7:be:22:9d:0e:a2:09:a1:a3:e9:2c:01:
7c:c2:05:32:b7:c8:46:9a:30:2c:7d:49:40:be:92:e8:fb:b7:
d1:88:82:5d:70:66:5a:fa:5e:f2:27:f7:c9:cc:6c:47:d5:6a:
ab:bd:78:4a:1b:19:c2:6d:61:dd:4e:7d:fc:9d:b9:d1:58:c8:
2c:4d:0d:60:a5:3d:72:ad:68:a8:01:bb:07:9c:30:b8:33:79:
80:54:c7:44:60:e8:84:12:43:8f:91:53:f2:bd:aa:2a:ca:63:
d0:11:4d:ed:d3:18:d3:61:5a:27:03:04:32:fa:36:9a:2c:f3:
f7:cb:e2:a3:06:26:53:8b:11:f6:32:37:ae:3c:b1:1d:3c:76:
a5:61:a1:29:fa:9e:c2:29:c9:2e:24:26:3a:f8:42:e1:70:f1:
03:a1:0f:0a:b7:a2:d1:65:de:31:64:ba:d8:f8:68:39:09:a4:
38:c2:3b:26:b3:99:32:00:6c:04:31:b4:a8:24:d7:c1:b5:6b:
6f:72:f1:9d:95:40:fd:d5:db:ff:a0:7d:5f:43:14:47:43:85:
34:ac:33:7c:0e:96:4d:89:9f:37:f5:70:06:81:6e:63:22:e7:
f4:88:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:10:33 2025 by rpki-client