Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d130b7fd-52a9-3169-b3b8-7f9796e6f0ad.roa
File: d130b7fd-52a9-3169-b3b8-7f9796e6f0ad.roa (raw, json)
Hash identifier: O8xf5B/Vgs0L+OnF3vkr8YICl20xcznecl4UQTeb3mk=
Subject key identifier: 5F:CB:E2:74:57:9D:D9:D6:CC:9B:C0:A5:09:7F:23:7C:1F:19:AF:51
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1F2B7A71414B6BEEB5FFC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d130b7fd-52a9-3169-b3b8-7f9796e6f0ad.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.247.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1f:2b:7a:71:41:4b:6b:ee:b5:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cf7cd4ed-944e-4df2-99c6-d7a1dbc8e4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:69:08:db:d9:73:ac:f1:5e:4e:9f:03:ba:
90:b0:1c:4c:e0:d9:21:8c:c8:c5:ee:5b:82:85:9b:
a5:5e:9d:49:0c:fe:c8:57:b7:03:7c:9c:55:e2:16:
d3:61:70:a3:43:5d:d3:30:ee:6c:0b:38:85:14:31:
6f:64:28:f9:74:37:7b:62:08:14:7c:33:e1:63:6c:
80:19:de:1d:9e:4c:de:d4:92:c0:0a:eb:61:c4:7a:
b5:66:21:47:76:ed:3c:92:15:d9:07:96:30:1c:16:
b0:e3:f8:53:12:0c:01:a3:f2:c9:1c:82:1a:41:d4:
1b:63:17:0c:2f:7a:b3:07:ed:db:73:68:bd:48:2f:
8f:29:79:d2:1f:35:6f:a7:47:47:c7:1d:ce:06:c0:
60:f2:cb:f2:04:6a:dd:ee:11:8e:0f:a0:bf:d0:6d:
df:0b:69:0a:5d:33:7b:64:a5:26:b2:22:e8:37:de:
d8:8d:4a:fd:5e:75:9f:cc:3f:68:5f:3b:4d:37:b3:
13:11:6d:e0:67:35:0d:8e:85:12:8a:4f:c6:61:1d:
d2:72:83:c0:b7:f3:df:a6:05:38:81:cf:44:48:2a:
47:3d:33:ae:42:90:f8:9e:c6:64:f7:c4:2e:49:7f:
72:07:4d:bc:21:e9:3f:a9:cf:88:c0:7f:0b:22:55:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:E2:74:57:9D:D9:D6:CC:9B:C0:A5:09:7F:23:7C:1F:19:AF:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d130b7fd-52a9-3169-b3b8-7f9796e6f0ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.247.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:17:16:ff:24:7e:44:1d:03:a0:0b:66:7e:d5:e9:e1:92:38:
0e:84:24:3e:d8:a3:8c:6f:92:d0:b3:6f:13:e6:c5:fb:d5:74:
c9:66:52:d4:91:44:4c:54:b1:43:34:b7:cf:b7:56:39:24:44:
13:40:b2:10:ef:c4:1a:7d:2a:a2:b7:07:dc:8f:6c:b9:2e:eb:
90:9d:5b:2d:49:3c:a6:21:9b:37:1e:77:72:3f:71:a4:a0:99:
ed:a7:f5:1e:0d:28:cb:54:f7:e1:e0:e9:32:88:2d:2b:ad:39:
24:10:1a:f5:16:b2:7c:47:93:a0:f5:5a:10:c9:98:15:92:c8:
d4:ac:7a:29:9a:f5:7c:48:8c:c6:04:37:83:f3:b1:46:40:9a:
b1:73:41:12:ac:0a:67:ed:fd:83:30:f6:fe:62:75:e4:f7:50:
c7:40:2f:ab:2c:19:d6:44:f8:55:eb:b9:0a:c9:00:5c:1b:6e:
9d:2e:1b:3a:29:a3:80:cb:cb:4c:98:18:92:37:61:e6:be:8b:
3f:12:4d:a8:a8:a1:2a:41:7a:41:38:f3:fa:e5:e9:41:a1:43:
ae:a2:18:40:bb:35:67:aa:d3:f9:2d:0f:8d:d5:60:d2:9a:0f:
79:5e:96:bf:bc:4f:5c:67:43:cd:1e:17:79:32:ba:41:71:7d:
59:4a:78:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:07:13 2025 by rpki-client