Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf855f94-e4d5-39d8-9a15-0958d338a9a9.roa
File: cf855f94-e4d5-39d8-9a15-0958d338a9a9.roa (raw, json)
Hash identifier: OJ5XdscU9U9uAcAD8h/PxFcLx8AXrN4QI0dHVvgmtpY=
Subject key identifier: 6D:3E:3D:49:8F:04:82:C9:4B:D2:2B:EA:1D:54:FB:89:9C:79:BD:59
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FE17D0108E9786ABFBB0E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf855f94-e4d5-39d8-9a15-0958d338a9a9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.198.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fe:17:d0:10:8e:97:86:ab:fb:b0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3c5d9181-24cb-45f7-91cf-67a7e1881f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:21:48:2b:f2:28:59:42:2a:c0:bc:7b:2d:
92:fb:6f:ae:6c:e0:dc:c3:d5:d3:69:51:ca:82:7a:
6d:a8:26:cd:c1:38:c8:40:53:c9:b2:fd:bb:c0:7e:
85:aa:14:9c:b4:07:6f:7a:14:78:50:2c:ed:00:05:
15:32:bf:17:5e:e7:9a:3c:54:34:4f:af:d9:c3:9d:
dc:e0:40:ac:15:c4:4f:a2:0f:d9:8e:9c:95:9e:40:
2a:35:63:1b:54:a5:db:3a:1e:67:19:aa:48:70:a0:
25:f8:d4:9b:cb:a8:4e:42:c2:45:51:50:e0:df:0b:
2e:a2:0c:63:ed:90:99:6e:73:e2:48:84:4f:ec:2a:
6d:22:7f:be:64:fe:c9:a1:55:fd:84:f6:8a:21:57:
ac:7c:67:bb:ad:53:34:ff:95:29:9b:25:42:5c:c0:
46:46:af:b1:c5:d7:26:b0:11:ba:1d:ce:cf:17:0b:
26:cd:d2:94:d7:b0:d1:78:76:2d:4b:ac:e4:0a:81:
71:51:90:58:0e:e1:54:c0:f9:18:10:74:da:dc:f0:
e1:d1:5c:83:54:4f:40:cf:cf:f4:f2:d9:20:c5:7e:
c0:d3:7b:14:74:6f:25:19:3b:0f:42:10:7f:34:50:
09:0a:d6:0d:f1:27:97:2b:a0:2a:85:68:1a:87:92:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3E:3D:49:8F:04:82:C9:4B:D2:2B:EA:1D:54:FB:89:9C:79:BD:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf855f94-e4d5-39d8-9a15-0958d338a9a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.198.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:d5:13:81:f9:a6:0d:18:ee:c5:20:7c:aa:3d:42:28:7f:a2:
91:3f:35:a0:a2:b6:2e:4d:f3:91:4d:aa:e5:fd:df:8a:66:65:
f0:75:56:e3:85:90:58:a7:4b:83:e9:2c:46:e6:1c:fc:8c:52:
2e:40:86:49:a7:3b:0a:1f:f2:54:19:2c:2a:58:b8:7b:46:40:
32:b1:c7:e8:05:df:3e:c6:41:ae:81:4f:a1:d4:ad:59:3a:20:
8b:92:cd:54:e1:a3:14:8d:d2:57:50:b7:2f:2d:54:23:0d:65:
16:37:28:83:86:33:81:c8:11:ca:f9:e9:71:50:03:70:c4:64:
a8:e6:06:1f:64:52:e9:78:23:cd:eb:ad:57:a5:16:83:a9:ba:
aa:11:47:fe:cb:c1:be:33:d6:b5:96:d8:03:26:1a:5c:a6:75:
2f:36:d1:3c:53:67:a7:28:77:0b:19:8f:86:33:90:18:7a:03:
c1:a0:63:62:18:7c:43:ed:f7:d4:1e:4f:2f:61:7a:e8:03:d7:
3b:3c:51:77:11:ce:da:3e:13:2f:60:bf:2e:c3:9e:f0:f7:3a:
81:0f:56:f6:d5:5e:87:b9:a7:3a:09:4e:ef:96:05:1e:70:c6:
ef:a0:7c:47:d1:43:5a:a1:7a:cf:6c:49:7a:5c:b4:ba:bb:a4:
25:f0:bb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:50:10 2025 by rpki-client