Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9cacb5-9a78-3dfb-8991-5773cc73b849.roa
File: ba9cacb5-9a78-3dfb-8991-5773cc73b849.roa (raw, json)
Hash identifier: S40ymrqoZVYsw23YjtYdqzCamdE8Wc2t6mXEe9yNCtw=
Subject key identifier: 62:CF:87:3E:12:23:26:0D:D3:75:CD:98:7A:59:2D:EC:4E:BE:C8:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285846B9A658B2A8331B53E5854B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9cacb5-9a78-3dfb-8991-5773cc73b849.roa
Signing time: Wed 31 Jul 2024 22:32:43 +0000
ROA not before: Wed 31 Jul 2024 22:32:43 +0000
ROA not after: Tue 29 Oct 2024 22:32:43 +0000
asID: 396982
IP address blocks: 35.219.196.0/24 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b9:a6:58:b2:a8:33:1b:53:e5:85:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 22:32:43 2024 GMT
Not After : Oct 29 22:32:43 2024 GMT
Subject: CN=140108f7-aabd-4579-b7f4-4a9851c69487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:3f:3b:f2:c7:8f:ce:26:b3:65:56:c3:82:
9f:33:46:f8:e6:92:b6:ff:2a:ca:59:6a:52:1c:93:
1a:2d:59:73:9c:cb:a7:ee:a8:68:31:f1:72:97:70:
63:8c:8b:ef:bc:82:1c:21:b9:9f:30:45:a0:a3:21:
03:91:5c:1d:1c:1a:b4:b3:d8:4b:92:1e:ed:7e:22:
0a:64:30:d5:fc:3e:a6:ff:5b:cf:6e:99:e5:58:ea:
18:9e:32:47:60:27:98:53:cb:9a:9d:86:22:16:34:
df:c1:86:6c:4e:90:68:00:2a:1c:a4:78:8a:43:7c:
cd:8b:87:b0:f8:75:30:71:e6:88:df:7a:95:98:f6:
3f:b8:19:00:e2:2f:84:2a:92:87:87:d3:ab:47:1d:
ba:b6:e0:13:d8:37:e7:f4:34:40:ae:c7:7f:9e:dc:
99:6a:35:d7:b8:c4:0b:d1:7b:cc:8c:54:eb:0c:1b:
bd:66:ff:7c:3f:d6:a1:fa:62:ea:a2:b4:c9:a2:90:
95:6b:ef:70:7a:96:dd:91:57:50:e0:5d:5f:96:27:
7f:0b:1f:96:22:15:89:c3:b3:00:1a:9d:5e:84:b1:
68:70:af:81:62:19:16:7e:36:55:09:73:ab:ce:6e:
21:26:8a:25:72:1a:36:15:9c:45:85:02:af:30:ce:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CF:87:3E:12:23:26:0D:D3:75:CD:98:7A:59:2D:EC:4E:BE:C8:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9cacb5-9a78-3dfb-8991-5773cc73b849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.219.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:b2:28:38:b7:9f:0c:e5:22:44:06:29:02:b9:8f:1e:2e:30:
ab:8c:f5:be:df:57:5e:e4:de:2b:85:06:51:d9:2d:d1:34:70:
d3:be:c1:02:2d:c1:92:06:4b:6c:9b:29:da:9e:8c:ec:2c:bc:
a1:11:00:32:e5:ef:6f:d3:8d:b3:79:b0:fa:d6:95:57:44:41:
62:15:8f:e4:27:a0:e4:8a:1f:4c:89:df:b4:2b:0f:5a:3b:de:
fc:f8:58:aa:91:a2:81:13:0f:6f:f6:92:80:dc:1f:e5:c5:34:
38:10:d9:83:f0:00:3f:a1:ea:02:e7:e1:5d:40:53:58:f7:54:
a9:9e:ac:70:db:c7:df:61:7b:d4:32:1c:2e:86:0a:4c:b2:8d:
d1:97:23:70:82:5b:bf:6f:8e:67:d5:4e:85:18:e9:5e:8d:1b:
47:7b:11:d5:4d:1e:4f:98:db:02:3e:98:d2:27:b0:87:ef:c1:
22:49:f0:8d:4c:0a:8e:ca:9c:28:21:cb:66:fe:ac:b7:bb:a9:
83:92:69:13:27:85:99:dc:53:39:f0:04:9e:31:fc:ba:d0:fe:
fb:46:4d:57:f6:f5:ae:87:78:a9:ad:23:8d:c2:09:86:2b:b6:
74:02:30:c2:cd:e8:e2:b3:4f:27:f5:47:eb:1a:0d:6e:3c:64:
cb:a7:13:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:55:07 2025 by rpki-client