Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c554c065-8ef7-3c93-9f77-a9514227abe6.roa
File: c554c065-8ef7-3c93-9f77-a9514227abe6.roa (raw, json)
Hash identifier: bHdmJ2835r0goJ5AykM5Kpr9oQn+gYGtXAJGvPMVBLE=
Subject key identifier: D3:93:89:34:80:AA:0E:83:B7:A4:2D:84:7C:0A:47:21:3F:2C:B7:2E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A151750FFA4A4C8A6EF8810
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c554c065-8ef7-3c93-9f77-a9514227abe6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.196.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:15:17:50:ff:a4:a4:c8:a6:ef:88:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fb97f548-ac06-4abf-ba73-f2377e476577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:45:96:39:e7:4f:eb:78:5f:c0:bf:56:6b:
a2:d8:45:f7:36:06:64:c2:6b:3a:59:71:7f:de:b7:
87:fc:ea:77:a3:0f:ae:3c:a5:b6:bf:9f:55:fc:f8:
dc:02:dd:b4:e1:11:1f:e7:a1:5a:95:ba:90:07:48:
ac:a1:60:79:6e:1d:01:eb:53:60:29:2b:b6:cd:bd:
d4:0c:6c:68:31:2f:07:af:95:0d:38:db:d6:5e:19:
46:61:22:c3:22:71:a7:1f:da:41:b8:96:00:62:a6:
d7:ad:80:22:51:4e:fc:69:38:04:d2:c1:03:ba:16:
e1:44:37:d0:bf:80:24:a6:39:3f:03:52:3d:be:12:
04:a5:5e:da:14:93:18:17:a7:4d:5a:25:cd:f2:dc:
61:ea:34:15:1e:5d:14:51:90:a9:f2:d7:0a:42:53:
4d:25:9e:48:4f:e3:52:5a:e5:72:9a:2d:2c:0b:45:
96:d1:d0:5a:36:55:88:3e:4f:9e:d7:75:11:4b:0a:
a0:f9:4d:85:0d:d8:be:ad:18:ee:54:1a:46:7b:f5:
12:61:35:cb:8e:8d:93:5e:47:1a:c8:e2:ca:04:4c:
4f:21:43:1f:ef:3e:be:18:6a:e3:09:5c:94:19:5c:
42:74:9f:cb:fb:4b:1b:22:8f:d7:88:97:6e:dd:9e:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:93:89:34:80:AA:0E:83:B7:A4:2D:84:7C:0A:47:21:3F:2C:B7:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c554c065-8ef7-3c93-9f77-a9514227abe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.196.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:28:33:6d:cb:bc:93:77:3c:eb:a9:86:9b:2d:47:bd:f1:cf:
93:1e:81:a5:fb:52:0d:08:c6:e5:0a:fb:84:8c:45:d3:f7:c9:
ba:92:38:26:4f:5e:07:cc:3f:b5:1e:91:b5:44:42:6b:25:5c:
1e:32:fe:8c:55:7d:12:08:2f:81:52:bc:ed:2f:48:da:06:6a:
e8:94:e9:21:26:19:a1:4f:9a:46:b4:51:06:dd:2a:05:54:e8:
53:70:8f:6f:04:64:af:fa:92:21:15:22:3d:5b:51:7d:aa:0b:
f1:04:72:c3:a5:c5:95:c8:43:ed:e3:0d:76:96:68:31:47:9d:
cb:1d:f5:04:b4:90:63:ee:86:8a:c7:b5:fb:f6:06:5c:c9:32:
2c:ed:10:8a:87:23:74:0b:14:c6:46:dd:3d:18:a6:ee:74:21:
04:38:37:58:5d:a6:c8:3c:27:6e:cd:0e:57:32:36:01:37:c9:
28:66:78:ab:23:da:10:0c:f5:d9:2c:b1:55:11:5b:65:c2:da:
1a:d9:d7:ae:43:0b:22:85:c4:f5:8b:3b:e0:72:a2:aa:48:9f:
d9:dc:39:3c:39:76:66:c7:1e:2d:b1:e7:fa:71:8a:a4:30:b1:
a6:ff:64:7a:52:5a:04:fa:56:f4:26:91:d5:b7:d2:3a:6a:22:
dc:92:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:35:59 2025 by rpki-client