Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acb82725-d800-3d84-aba0-8e4de53f1290.roa
File: acb82725-d800-3d84-aba0-8e4de53f1290.roa (raw, json)
Hash identifier: YDKWSB0spT5pIl2ReSagUBrkR7pCdjzdLlTqXRxm3Vk=
Subject key identifier: 38:49:87:D6:80:C3:7A:BE:CD:D3:FB:8C:06:B8:2F:AD:86:E4:47:F1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F51DB11275C676679B95C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acb82725-d800-3d84-aba0-8e4de53f1290.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.201.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f5:1d:b1:12:75:c6:76:67:9b:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=71a69c97-3925-4297-a1f9-b071f26f9b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:2c:14:2a:97:e8:fa:8c:54:b4:93:97:35:
b3:ad:6e:8f:d7:8b:9f:96:44:95:09:57:a6:85:18:
36:1a:a4:d5:01:10:77:3f:34:6e:7c:b1:78:ff:0d:
ce:f4:91:f3:44:1f:99:4a:65:91:01:f3:25:6a:ea:
be:69:d1:77:0a:79:08:58:85:45:c9:2e:b5:f2:2b:
14:ff:ac:08:f1:34:c7:8a:e0:8e:00:37:c1:2e:d9:
64:20:85:19:d1:ee:a0:b0:e8:ae:39:f8:45:cc:e6:
db:10:01:5e:98:04:70:64:f5:de:8e:20:72:e2:39:
af:8d:a6:20:0d:ad:40:3f:5f:31:38:2e:74:4d:e7:
5e:f2:37:2f:d3:04:15:b3:a4:bd:5a:26:ab:39:18:
83:27:89:b1:f4:44:2c:a4:36:23:e6:12:01:f9:79:
18:85:cc:21:ab:7e:b4:95:b1:b1:31:9b:79:d0:7a:
0e:29:11:47:bb:c9:56:b1:d5:52:0e:4c:73:b7:bc:
28:b2:f1:41:0c:83:31:ca:15:12:a7:8d:dd:6f:ad:
f2:a2:e9:25:d4:c9:16:a3:16:8a:00:b4:25:e4:66:
87:89:42:bd:0c:2c:63:94:a3:f5:93:b7:70:49:17:
fa:25:9f:09:ef:17:d6:0e:82:53:f8:02:82:c6:cd:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:87:D6:80:C3:7A:BE:CD:D3:FB:8C:06:B8:2F:AD:86:E4:47:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acb82725-d800-3d84-aba0-8e4de53f1290.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.201.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:05:d2:45:91:47:0d:b5:8b:97:52:6b:01:6f:ca:b8:3d:87:
7e:17:17:30:b0:04:08:17:bf:ce:11:72:62:9a:d9:3f:33:88:
6f:61:5a:6e:06:d9:c1:ba:9d:ce:39:7e:7d:ec:8a:ad:10:c4:
fb:f5:f5:35:50:58:3d:fb:a0:28:88:25:a8:a5:78:61:f0:96:
b4:90:42:07:0d:00:1a:40:a7:28:41:3d:8a:c2:e6:c2:fb:11:
42:51:2d:c4:35:c6:06:d3:69:8c:13:0c:47:66:21:72:6d:d7:
39:04:4d:be:bd:21:14:a8:9a:cf:0b:de:e1:33:3a:2a:68:46:
11:75:98:6a:a0:0f:bd:80:fb:5a:61:11:a5:fe:3c:72:8f:26:
59:51:5e:81:f9:3d:77:5a:73:28:a4:a9:82:8e:14:4f:2c:e9:
1b:4d:88:06:a1:7a:c5:ad:47:af:37:80:e5:76:16:18:b1:78:
53:8c:55:ad:b2:17:5f:e6:7c:d6:2c:80:42:0b:df:1f:e6:dd:
42:88:87:6c:92:ad:b6:4e:bb:23:55:7e:41:4c:5f:5c:e8:1d:
a9:0f:c8:f6:80:51:ea:2b:80:bd:1c:e2:1f:b3:21:aa:8a:1f:
73:d4:8e:e1:3e:95:16:dd:a2:6a:4f:c2:c3:8f:68:72:5d:43:
36:4c:d9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:32:37 2025 by rpki-client