Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba3f528f-deaa-3483-a529-bf9977fb5944.roa
File: ba3f528f-deaa-3483-a529-bf9977fb5944.roa (raw, json)
Hash identifier: jlri7NfeMGHNrNHxFo3jAGrVbsZVd95iG4OZvJy7C5Y=
Subject key identifier: 76:C7:D6:A9:46:97:72:92:39:EB:80:27:7B:DD:3F:48:15:58:F1:A0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A18EB82EE1A84C20B50AC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba3f528f-deaa-3483-a529-bf9977fb5944.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.203.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:eb:82:ee:1a:84:c2:0b:50:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fdca2bea-1173-4184-ab98-c7c3f7a32f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a7:b0:52:ff:d9:87:cf:94:92:99:d5:9d:5f:
ce:56:b2:d9:7d:dd:c8:d7:4b:d6:a6:64:93:d9:74:
3a:5b:9f:8d:2b:d6:64:53:8c:1e:49:01:0a:56:8f:
4d:9a:a2:7f:94:fe:d6:44:3c:42:08:9e:63:e1:85:
b0:e1:3f:46:fa:f4:16:0f:e9:9f:c9:af:d4:6f:18:
de:8e:d7:b9:b7:2d:16:e2:30:b7:9a:ab:67:e1:5c:
fb:22:02:5c:14:5a:29:b5:08:38:36:84:33:3f:99:
06:98:62:c6:03:8d:3f:fc:3a:99:62:65:c7:1c:07:
f8:db:7e:53:1d:65:47:4a:f8:48:79:a2:5a:43:d5:
3c:25:5b:15:99:49:51:be:46:35:08:fc:c7:bd:a5:
1b:c0:e0:08:bc:ef:5e:04:9a:e5:64:15:7d:6e:3f:
10:f9:ed:83:1c:64:77:0b:b5:38:45:e9:ed:dd:9e:
ec:8c:d5:9f:26:18:bd:59:ff:fb:9e:69:87:41:4a:
ca:c0:2f:b7:b2:87:9e:c7:15:d8:cf:3d:0d:92:1f:
0f:bc:f5:d2:0d:d2:7b:59:22:47:ea:b6:00:8a:ec:
8f:ca:84:75:e0:4e:7b:e2:7a:a2:fa:a9:16:57:d2:
c6:4a:ae:2e:3c:a4:f5:90:46:f8:75:bb:89:2a:c2:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:D6:A9:46:97:72:92:39:EB:80:27:7B:DD:3F:48:15:58:F1:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba3f528f-deaa-3483-a529-bf9977fb5944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:9f:76:35:27:26:87:ca:d2:e2:be:d6:65:8b:25:cd:b2:84:
c9:36:e4:f4:12:7b:49:22:fc:c5:c2:bb:71:0d:07:c5:3b:46:
58:6b:2d:e8:bf:54:17:ad:b3:dc:b4:ae:f3:ae:37:1e:f3:f0:
c1:ca:1e:98:4d:c2:d0:f6:16:ac:4b:0e:40:84:7e:20:d1:fd:
b1:6c:55:0f:ab:97:da:f8:57:37:5c:47:33:2d:db:b4:29:0d:
15:53:86:b5:4c:9e:7c:a3:3c:0f:7e:38:d3:ad:f1:3e:bb:94:
3d:a4:37:72:a2:c9:91:03:e4:1c:16:c0:4a:d6:ed:38:e5:e5:
1d:45:55:35:48:4a:fe:38:dd:a3:a0:d3:41:48:d5:1d:27:18:
cd:cd:c7:ad:15:1a:c1:51:3e:68:65:41:ef:88:99:08:13:be:
30:2c:69:3b:df:a6:33:27:5b:20:c0:f1:86:99:50:ed:85:d8:
33:e5:2f:9b:e9:eb:1f:02:80:2d:2a:0f:94:49:14:db:1f:96:
a5:dd:c5:e7:73:20:36:39:5a:10:8d:fd:e4:a4:90:bf:eb:bd:
2e:ed:74:cc:05:32:95:cd:02:60:20:d1:e3:e5:64:5e:00:85:
63:c7:6f:3b:d1:11:c2:c1:ff:14:31:91:23:0b:bf:c2:06:bc:
35:cf:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:52 2025 by rpki-client