Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b66785e7-10eb-3bbe-ae71-22c5265fa2e4.roa
File: b66785e7-10eb-3bbe-ae71-22c5265fa2e4.roa (raw, json)
Hash identifier: x/sJKj6LuO8fJKZVgFh9YyB1528ghmXPWLIDBdNHZG8=
Subject key identifier: 81:E4:25:E7:73:67:AE:EC:EA:45:23:E8:5D:81:99:31:B3:13:2F:ED
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A17CBDA5089729E67104500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b66785e7-10eb-3bbe-ae71-22c5265fa2e4.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.205.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:cb:da:50:89:72:9e:67:10:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c7570ce5-bb7e-4bf9-a8b0-e9509c88bb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:96:32:87:d5:d9:f7:1e:a1:d4:66:5a:f6:
71:15:4d:1a:c6:07:ce:15:a1:51:5c:a5:c5:de:89:
c4:ce:75:73:85:fe:2c:b7:27:f3:28:86:e2:7c:8d:
40:78:31:71:b8:7e:09:17:66:9b:e7:53:b4:07:77:
a6:19:43:ba:0e:0b:9f:3f:21:50:ee:28:42:3a:d6:
bd:48:ce:91:e7:00:9d:a8:77:45:a6:fd:48:3e:fb:
e3:f3:2d:b9:34:28:bd:4b:1a:fd:ed:72:c6:32:7a:
f9:13:5a:6b:f6:68:c4:4b:32:e4:48:16:57:2e:05:
01:91:31:a5:07:fc:44:a3:29:1c:53:75:b2:34:42:
0c:57:12:e5:a7:f9:43:b8:52:79:29:f3:3f:b7:59:
3d:a8:ba:88:2f:48:50:b5:48:83:c2:dd:8d:63:b9:
21:a1:e3:89:fe:52:dc:50:98:7c:ed:47:2d:a0:01:
43:d6:27:00:0d:47:93:6e:be:2f:fc:15:43:c1:db:
bc:b0:bf:5c:84:61:a9:65:d2:14:5c:0d:67:df:cf:
12:22:b5:50:9c:b2:08:65:7b:84:63:7a:00:0e:08:
fd:f6:56:31:03:61:fe:5d:ea:84:8b:50:37:5b:7d:
89:90:91:7e:50:b6:4c:c8:73:2b:9a:de:5d:a7:9c:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E4:25:E7:73:67:AE:EC:EA:45:23:E8:5D:81:99:31:B3:13:2F:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b66785e7-10eb-3bbe-ae71-22c5265fa2e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.205.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:fe:db:1c:17:c1:12:76:c5:08:29:ca:48:34:8d:2d:b7:f1:
fd:aa:47:6a:0b:53:9e:0d:b5:ab:ef:80:d3:46:c6:de:35:1e:
2f:bc:33:ce:f5:33:1b:f0:b8:00:80:f8:03:e4:94:18:27:ba:
70:82:5d:bb:b2:81:8d:e2:00:d0:d4:b8:f1:11:51:b9:00:15:
10:1f:b1:e4:52:c2:31:01:2f:68:14:33:20:63:c0:2f:a7:ea:
90:0f:15:ae:a6:3d:81:b1:94:e0:a1:cf:5e:29:88:a2:0b:f4:
2c:e7:c9:23:57:c2:ed:6f:f9:51:18:3e:1d:07:a1:65:0c:44:
e2:b4:49:cd:27:2c:f9:ae:b7:b8:86:ce:3c:93:d1:3a:d8:1a:
4a:6c:e4:9d:a4:32:b5:fa:98:ad:d1:47:2c:1d:8f:a7:fd:ff:
e2:74:1d:ae:ca:8b:c4:7f:a7:d2:0a:9c:c8:8e:98:21:48:2f:
37:a1:2e:5f:5a:ef:cb:3b:45:00:26:93:c6:d5:4b:b0:0e:99:
a7:aa:49:c8:73:06:70:70:29:40:1e:6a:f8:93:8c:34:be:c2:
d1:5b:94:89:f7:4b:05:7a:25:eb:6d:79:c6:55:8e:61:ba:78:
81:47:c4:77:7a:19:c4:ea:24:38:d8:40:f6:0e:d7:47:76:45:
27:a0:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:33 2025 by rpki-client