Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd7b9358-5ba2-3899-a439-94f676b6df9a.roa
File: bd7b9358-5ba2-3899-a439-94f676b6df9a.roa (raw, json)
Hash identifier: pUf0RAl6f2tDQl4RwyPXr5djHoBIypVZQrSQMSorrWM=
Subject key identifier: 3D:F5:43:61:FC:E1:E2:BE:01:51:03:3D:26:42:2C:12:51:29:2B:68
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2565123E45B775D20DEC20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd7b9358-5ba2-3899-a439-94f676b6df9a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 35.203.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:25:65:12:3e:45:b7:75:d2:0d:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3a8db09e-956c-4867-bb48-77fc3220b62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:6a:b3:81:1f:0c:08:f1:d3:44:0a:f1:cd:
d0:35:aa:40:38:67:a7:7b:df:dd:82:47:6b:17:86:
c7:39:d7:4f:4a:74:e9:cc:5f:b2:75:89:70:16:89:
30:be:43:49:ae:b6:51:f7:f0:28:27:5b:6e:a7:b4:
ae:63:27:fb:91:bd:bf:5d:14:b1:35:94:70:6e:cb:
bb:e2:61:cb:a7:20:e4:a6:6c:38:9c:1c:79:fb:20:
83:ef:90:d2:94:fa:d5:ed:7b:54:bd:80:9e:34:cb:
21:80:5e:31:71:7f:40:3b:19:44:96:90:5f:05:ea:
7e:a6:4c:fd:f8:84:5e:74:c1:8b:ac:bb:4e:32:1a:
7d:64:3b:ff:89:10:38:5a:e0:94:f6:f4:6b:4c:a8:
f3:66:2e:c1:87:2f:19:39:2d:9c:82:9e:c4:3c:15:
af:0a:51:18:97:a7:10:9e:5c:77:8c:04:47:c1:34:
c6:57:2e:92:c5:e5:4b:3e:aa:da:ed:0e:52:65:12:
62:18:b0:d0:3c:00:fe:33:58:c6:a6:72:23:24:44:
3f:d0:4b:58:6d:0a:a3:aa:c8:6c:7b:ee:73:9d:46:
6b:ce:de:aa:1a:6d:73:12:92:8f:aa:60:9c:9c:2a:
50:77:b2:82:ea:96:c6:39:91:ac:44:05:99:d3:0b:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:43:61:FC:E1:E2:BE:01:51:03:3D:26:42:2C:12:51:29:2B:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd7b9358-5ba2-3899-a439-94f676b6df9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:0e:c3:a9:00:f4:a9:a0:bf:4d:02:7f:0f:c2:d8:ea:a7:b2:
43:d7:42:f5:2b:20:80:64:e9:56:69:0d:0b:6c:7b:66:1a:33:
cc:63:d6:1e:cc:92:b2:12:48:3c:ff:14:c9:f4:aa:4a:74:be:
3c:c1:a5:80:bb:67:1a:18:b7:5c:c4:c1:51:69:23:94:af:d9:
ad:55:d9:1c:98:e2:40:7d:d4:ba:13:32:d2:36:2a:54:93:52:
c3:61:e7:91:fe:a2:74:9d:08:c2:9b:f3:cf:ad:fb:bf:aa:e6:
60:6b:b0:fe:78:f0:86:35:a2:a2:cd:f3:60:a3:f6:fb:03:07:
61:dc:9c:e0:72:34:99:0d:6f:e9:bf:5f:65:8d:c9:f6:56:1b:
5c:ab:0c:06:9c:14:dc:34:14:9f:5d:2e:ec:cf:81:3e:65:fb:
66:aa:73:55:10:a0:76:e9:6b:e2:00:b5:1e:c5:68:63:77:96:
61:ec:c0:71:c0:0e:27:a5:97:ee:83:a6:9e:e0:3a:7a:7b:1b:
2d:af:07:ec:ca:46:f0:06:0b:5d:95:61:cb:b4:22:45:37:48:
7b:67:4b:23:f1:5c:6e:2e:a4:bf:cb:b9:9f:70:7b:22:af:df:
a6:07:52:e6:f3:6f:04:51:82:69:6b:98:46:b8:dc:12:fd:46:
b5:9f:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:48:55 2025 by rpki-client