Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1aa22c0-20cf-3048-900c-a866a7864e73.roa
File: d1aa22c0-20cf-3048-900c-a866a7864e73.roa (raw, json)
Hash identifier: WOGK03IB+T314kWSOkrKSjAj8e9r/q/JUuBv/W0MjkY=
Subject key identifier: F0:7C:77:02:B5:75:05:01:3E:2B:D4:CF:1D:90:5B:C3:76:2F:E9:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F37803F23253B34F6B3D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1aa22c0-20cf-3048-900c-a866a7864e73.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.185.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:78:03:f2:32:53:b3:4f:6b:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b35baa38-ef47-4c8d-b353-8785f32b63e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:f0:88:a7:22:67:e5:84:63:79:03:f4:5b:
7b:a4:ed:39:80:94:6e:a1:da:10:47:c7:06:c3:57:
98:02:1d:b4:f3:05:6b:75:ac:ef:3e:6a:fc:82:48:
09:ee:27:db:2d:dc:76:f0:8a:56:43:ad:7d:79:93:
d4:8c:d2:ef:11:a9:1c:35:24:9a:6c:d2:25:c8:98:
d8:a7:cc:2c:a3:8a:ec:da:78:2f:fa:cc:f3:a5:e6:
bb:2a:82:90:8f:bf:39:17:09:8f:d7:69:7e:a0:66:
70:30:54:b8:79:6c:b3:a1:92:53:f1:4c:fe:83:9a:
37:a6:50:eb:b6:18:1e:a9:19:3d:a0:15:42:07:58:
26:c9:76:57:e4:80:92:6b:ce:99:f0:a8:ff:d4:46:
92:11:67:9f:83:65:ff:25:46:85:7c:ef:0c:10:3a:
e3:08:c5:38:2f:d3:4d:4a:f6:a1:11:af:9d:7d:1f:
d5:3c:66:9d:0b:0b:89:c9:42:9d:8e:02:8f:07:03:
f9:93:3d:1c:f9:c1:fd:a4:30:14:f3:42:ed:ec:8a:
68:cf:d6:9b:55:1a:f8:79:1d:dd:33:08:3f:70:97:
7d:24:e3:db:d5:72:c6:43:47:2e:7c:92:85:3f:2c:
db:43:bf:10:18:1a:52:fe:93:54:e7:b9:75:74:4b:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7C:77:02:B5:75:05:01:3E:2B:D4:CF:1D:90:5B:C3:76:2F:E9:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1aa22c0-20cf-3048-900c-a866a7864e73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.185.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:a2:85:b5:30:61:22:0b:ef:ce:c9:d8:54:06:45:e9:2b:4d:
4b:7b:f4:da:11:56:9e:09:28:ea:e0:68:83:68:0d:77:52:87:
e4:82:eb:d2:96:1e:8e:a9:bd:f5:8e:3b:58:04:12:df:cb:d9:
3f:78:f9:1e:3f:d3:00:c7:42:14:44:43:e0:3a:ad:e8:ac:46:
97:9d:68:11:c4:03:fe:a1:35:7a:55:62:63:ec:a7:d7:fc:30:
32:5f:b4:f4:99:9f:6d:32:0a:54:ce:48:a4:04:be:ed:c1:9b:
0f:83:cd:9a:4e:cc:36:7c:89:70:51:cc:77:9f:ff:e9:bf:60:
41:a1:ef:d5:19:b5:58:0a:c9:47:73:8c:6b:db:a5:0c:41:bb:
59:d3:a7:b0:ea:3c:22:11:27:f9:80:7c:87:c0:e6:fe:fb:99:
8f:3c:3b:1c:81:cc:15:21:33:24:a2:c4:02:c2:00:c9:5c:f5:
07:11:c9:19:a3:cd:d9:eb:e3:5c:ee:03:87:56:bc:d2:72:06:
19:bb:e5:71:3b:92:c2:aa:53:8f:e3:45:9c:4f:12:d7:33:4f:
27:57:42:db:19:1d:ba:70:1e:f7:d3:a5:90:84:63:e1:e2:48:
85:47:82:20:c2:06:04:3f:45:62:e7:68:fa:0c:92:d1:ee:42:
27:6e:75:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:55 2025 by rpki-client