Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a72413de-b18d-3d3c-a30c-78dbed3aa8ab.roa
File: a72413de-b18d-3d3c-a30c-78dbed3aa8ab.roa (raw, json)
Hash identifier: IQ1l+w3yqhJQ4BI/AEX6BwxARtgdGKPGCFRrr5c3AE4=
Subject key identifier: E5:4F:11:21:EA:6B:14:E2:C7:62:06:10:B6:76:5F:09:5B:E2:23:B1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A10A7F0D6B80BDF121FBC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a72413de-b18d-3d3c-a30c-78dbed3aa8ab.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.198.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:10:a7:f0:d6:b8:0b:df:12:1f:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d01f0d88-c456-4727-bfd8-9bd487392111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:be:7d:0d:e9:4a:50:15:13:3f:df:e8:5a:
a6:c2:00:d5:a8:ef:14:a5:28:25:15:f3:bf:6f:36:
0e:59:f3:9e:80:a8:67:f7:88:94:06:5e:8c:97:07:
5c:78:75:5d:d1:2f:79:99:b9:44:68:83:13:04:fe:
43:f9:f3:47:ee:5c:bd:d6:b4:3c:54:8f:64:bc:f5:
05:45:83:5e:02:a1:a7:88:0a:bf:c0:4d:d9:19:18:
65:ef:8a:00:ea:6a:6f:70:b3:ad:c3:69:b4:2f:e6:
48:8f:ef:3c:0c:d3:e4:02:08:c0:71:00:73:61:cb:
75:a0:f6:25:d5:b9:be:ad:fd:40:7c:cf:ae:24:42:
95:de:87:5a:0e:89:92:7f:8e:b2:1c:ac:09:94:de:
d7:2e:2a:ec:1b:67:6a:be:31:a1:80:aa:91:45:f5:
bf:57:7c:4a:a6:f7:cb:5f:1c:68:99:f0:57:74:8a:
86:7f:ce:cb:12:89:f8:0c:04:4c:59:f2:b0:fa:f0:
68:f2:fe:02:6a:f3:a2:e6:1c:ae:d7:8d:af:cc:24:
83:89:04:42:58:2a:4e:b6:ad:a8:d1:c8:37:f2:1e:
12:d2:e7:e5:b0:33:bb:d6:52:b6:61:ea:7a:0e:34:
80:e4:6f:fb:41:f9:d9:cd:04:fc:9c:62:bc:a7:5b:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4F:11:21:EA:6B:14:E2:C7:62:06:10:B6:76:5F:09:5B:E2:23:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a72413de-b18d-3d3c-a30c-78dbed3aa8ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.198.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:9d:5b:3f:65:e7:d6:65:ed:81:ec:0c:90:e5:e7:b9:54:a4:
07:99:b8:4d:d6:42:1f:3c:4b:76:9c:26:92:e9:bb:c9:d3:a0:
19:2c:bc:d9:54:bf:92:6a:a0:08:cc:0b:ed:bd:97:72:03:fc:
88:39:08:bb:21:8c:7e:c0:fa:d6:ea:62:42:96:3d:49:56:9c:
b8:7f:d8:f0:ad:d9:06:40:71:35:b9:57:a8:e2:75:b5:36:3b:
d7:07:07:48:34:80:18:a8:bb:c6:23:a5:af:0d:1b:ba:29:b1:
7b:c2:3a:4a:0e:90:66:79:6e:51:2b:f2:0e:e7:51:82:98:68:
b5:49:90:0c:b8:8b:3b:69:74:bf:bd:08:a8:ba:6c:e8:e5:c5:
59:fd:ef:fb:15:40:86:45:6e:7a:fc:e7:fc:92:16:0e:c5:84:
ef:fd:4d:60:4d:89:a9:a8:7c:17:73:21:ef:38:42:af:8e:2f:
1f:bd:9d:cc:a6:d6:f9:fe:7b:bc:dc:f2:53:df:19:6a:1b:d2:
5c:d2:df:5a:1d:14:d9:9f:b1:4f:2b:93:80:18:87:32:24:5f:
2e:21:d7:2d:4c:03:b8:62:16:2b:2d:9a:81:26:24:c3:e1:b1:
36:55:d0:8f:dc:15:f8:c7:4d:68:b1:3f:11:dd:3b:de:b9:62:
fc:bb:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:05:20 2025 by rpki-client