Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2904fb0-5856-3c52-a82a-ca94d83bfde9.roa
File: b2904fb0-5856-3c52-a82a-ca94d83bfde9.roa (raw, json)
Hash identifier: FkPrmYZMd4kVOSN6dJsGHQSjFW50XUCjT5iS4KhCcXo=
Subject key identifier: 0A:E0:05:24:87:7E:B3:47:AA:E1:38:FE:2B:E5:CF:62:E4:E2:B3:95
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F09B4F88D3B73AEBBCA140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2904fb0-5856-3c52-a82a-ca94d83bfde9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:9b:4f:88:d3:b7:3a:eb:bc:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=166f2a6e-52a4-4aa5-8c50-34d53915798c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:38:58:78:3e:c0:02:a8:2e:46:ca:5b:cc:
f8:b0:9f:e1:29:65:4d:aa:ee:80:a3:4e:4d:cc:de:
48:43:1e:0c:02:b0:65:eb:fa:77:dc:c5:aa:ab:a2:
6a:58:75:01:fe:d0:3d:20:2b:ad:9d:31:e9:d9:11:
37:fe:1b:01:e6:ed:45:37:2b:f4:2e:7f:26:e8:14:
62:f2:b1:d5:cb:cf:80:a8:16:9c:13:7a:f4:40:01:
d4:17:bd:27:01:5c:bb:9d:22:8c:2f:15:5c:e7:e6:
c1:1f:8f:f0:2c:99:33:8d:53:a8:08:66:6b:fd:eb:
2c:45:22:a7:b9:8f:7c:7f:c8:3c:ca:27:3f:70:1b:
99:70:ab:86:84:86:ef:20:a6:95:84:87:5b:88:ba:
8b:a5:fb:0c:50:2e:53:b5:57:ad:9c:0d:3b:d9:cf:
eb:c8:10:25:85:aa:6c:71:cb:e8:c4:95:05:ef:75:
69:b4:43:c0:79:d5:3e:a1:56:09:83:4d:a4:43:5a:
96:ec:ae:17:3b:43:72:c6:78:90:21:f0:f6:d0:25:
77:fc:80:46:d7:e5:2c:89:ca:78:5b:3f:7e:1d:38:
34:eb:8c:99:f0:4a:02:29:88:dc:38:11:1b:ba:83:
f6:b9:55:ad:69:29:53:3d:f2:32:2d:11:73:2d:05:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E0:05:24:87:7E:B3:47:AA:E1:38:FE:2B:E5:CF:62:E4:E2:B3:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2904fb0-5856-3c52-a82a-ca94d83bfde9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:dd:eb:7e:bb:d0:0b:66:97:56:9c:51:61:0a:a9:c6:af:d6:
7b:e9:3d:0d:5c:2e:5d:1e:d3:a7:92:89:77:f1:b1:14:ad:af:
4d:24:9c:25:5a:73:d9:07:ce:64:65:14:09:0a:91:1f:e8:56:
69:e8:89:cf:8b:48:9b:7f:86:8f:ce:49:4a:24:53:30:f9:d1:
99:8a:64:83:96:6c:ac:f0:01:6d:cb:c9:6d:42:e7:1a:84:43:
d9:19:2a:e8:76:54:bc:62:bc:93:44:51:92:b6:87:ba:ad:de:
86:dd:c9:35:85:f2:dc:c2:07:7f:2c:e5:04:8d:e4:f7:7c:88:
aa:07:f9:7c:57:0d:fc:44:a5:72:49:b2:76:25:a2:60:bf:8d:
81:30:4f:ed:c1:cd:4a:75:29:6d:83:f6:c4:1a:99:2e:b4:bd:
8a:b6:e4:96:05:19:19:cf:2e:94:8c:19:b5:f8:55:2d:19:01:
34:7e:c9:80:1e:bd:06:02:99:f3:08:83:a2:04:c8:40:ff:48:
38:38:3a:e5:5f:19:14:00:87:e9:f5:ca:55:0c:11:95:0f:9e:
56:9c:ea:a9:3e:0b:35:65:d5:ea:b1:fa:f0:ae:ba:84:61:5c:
47:f1:a1:23:f3:c2:db:34:4b:f1:a1:4e:ac:63:ef:2e:b8:ac:
c6:8d:8d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:49:46 2025 by rpki-client