Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c387e1ca-f332-3e72-b8be-1c28d577e5b1.roa
File: c387e1ca-f332-3e72-b8be-1c28d577e5b1.roa (raw, json)
Hash identifier: QKq8pOionuc/frlS3o7hRJ/TJnnIfQMRYCyK7xKN72g=
Subject key identifier: E4:88:E0:9B:16:25:EC:D5:3D:CD:60:B1:A2:F7:96:CE:3B:F2:68:68
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0C80B581C3E54EB12E72E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c387e1ca-f332-3e72-b8be-1c28d577e5b1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.201.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:80:b5:81:c3:e5:4e:b1:2e:72:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cb4777f3-9b67-48dd-9743-7b7221bbe585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:ae:26:97:74:58:85:f1:be:03:35:5d:09:
3d:c9:ee:31:6f:4e:ba:65:60:50:1a:3a:1e:51:ae:
ce:8d:e2:42:57:5c:1f:14:ef:d8:b7:91:b8:9c:c6:
ef:b5:fa:0e:b3:7f:21:e1:0e:6b:cc:83:e7:13:64:
6d:b6:55:c4:cd:09:b9:e2:5b:80:93:b4:09:71:64:
96:01:dd:56:b5:0b:99:5e:8f:05:83:9c:66:d4:73:
70:3b:18:9d:2f:90:bb:5c:a8:1d:d9:a8:ec:6a:19:
eb:19:22:12:35:8c:ce:dc:2f:39:88:93:69:7a:ad:
49:56:fe:3c:7f:d2:c4:23:52:2a:4d:2f:2b:f3:39:
84:48:69:8e:94:38:56:a2:5b:5c:c5:97:10:35:b3:
89:df:2c:11:26:ad:a7:fc:47:3d:85:25:ed:3b:f0:
f9:4d:3a:9f:33:7d:23:ca:5b:10:33:ec:c7:ea:0f:
c0:e2:9f:7e:ff:32:b3:e9:1d:d7:63:f8:44:39:96:
16:06:1b:10:cd:f4:11:0d:bf:f7:a2:8c:95:34:ff:
e1:84:60:fd:70:4a:a7:bd:fe:79:ed:17:6d:09:26:
a1:71:2f:a1:c1:f0:3b:e5:ab:ed:e4:c0:ae:d8:93:
43:4d:15:06:e2:78:57:1d:e6:87:a9:1b:bf:b5:7c:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:E0:9B:16:25:EC:D5:3D:CD:60:B1:A2:F7:96:CE:3B:F2:68:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c387e1ca-f332-3e72-b8be-1c28d577e5b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.201.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:55:f0:3a:c0:d3:50:3a:fa:ea:aa:12:40:05:82:9a:61:5c:
34:5c:fd:c9:a1:22:8e:13:8e:87:a7:dd:c2:fb:36:db:f9:c7:
80:f8:5b:44:7a:b7:d6:50:44:a4:e5:56:0a:68:9c:78:28:1a:
f1:2f:54:3b:80:d0:57:e1:06:33:ef:b5:fd:b1:ab:57:40:d0:
44:49:a6:33:dc:cc:3a:8b:07:2b:4a:1e:dc:a8:92:d6:24:7a:
b9:70:3b:27:15:13:68:69:35:1f:40:ef:7f:5b:b1:e2:09:88:
c9:10:24:d8:c0:27:d8:5f:c9:42:70:79:54:3d:79:f5:9e:42:
20:d7:de:22:e3:da:dc:36:71:81:5f:cc:43:e5:c1:70:c0:04:
ff:41:e9:60:dc:14:a3:03:03:45:2d:bd:c7:3e:d6:66:d9:fe:
ad:9f:fb:72:9b:8f:d3:26:ed:86:54:55:60:bc:a8:30:18:09:
b0:78:d3:9d:a5:b5:a7:be:95:87:c0:29:01:bf:af:99:c2:c7:
22:81:fb:a2:94:50:01:48:f1:24:b9:8f:46:a6:ff:4d:74:75:
fa:21:18:99:61:1c:c5:c9:bf:12:7a:fb:87:61:18:32:e9:45:
95:66:8f:3e:78:28:0a:df:e7:4f:62:e5:09:5e:33:ad:ff:34:
7a:45:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:01:26 2025 by rpki-client