Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2f29cc0-0990-39a7-9c1e-0125a6af6616.roa
File: d2f29cc0-0990-39a7-9c1e-0125a6af6616.roa (raw, json)
Hash identifier: jjxVRXO2oL+XU3DOvpuBwqHf+qdLU44XOwWRK8bu/rI=
Subject key identifier: 9F:3F:D1:ED:CE:5B:A9:49:F9:24:4C:AA:27:57:B6:43:55:3F:F3:3E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EB2EC0B61A567D96B15B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2f29cc0-0990-39a7-9c1e-0125a6af6616.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 19527
IP address blocks: 35.206.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:2e:c0:b6:1a:56:7d:96:b1:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=810d2e2e-ecda-4f81-ac83-bb49e4f7ad54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:f5:5f:e0:7e:ef:f8:d1:dd:51:bb:c8:e2:
f2:66:47:98:6f:10:80:a6:0b:b8:85:81:db:c7:33:
49:45:1f:2f:98:d2:9c:5f:b9:ec:16:2c:12:1a:a5:
5f:37:bd:6c:6f:09:e2:4f:88:9a:c8:17:d1:0b:6c:
72:0f:90:5d:23:76:d7:3d:d2:b0:f0:28:16:07:65:
49:78:f6:02:a4:7e:19:be:ce:74:8b:5f:d4:e1:19:
1f:f1:80:4c:5a:18:af:ec:29:34:2f:09:0b:e4:bc:
22:76:d3:f3:94:8d:db:b2:03:6d:d6:50:eb:25:e0:
fc:ea:f8:f8:9e:5b:e1:c2:28:48:c0:fb:c7:aa:cf:
dc:88:81:97:6e:c0:ad:8a:ee:0e:5a:33:9f:86:6a:
f2:6e:34:c6:e4:17:ab:1b:a8:dc:6d:fe:96:42:ea:
f1:2f:b7:ef:79:56:86:75:55:7c:66:17:7b:91:3e:
44:e6:9f:b6:a4:5f:20:ea:bf:a2:9f:a3:e8:ab:7c:
8b:50:4a:19:d7:8d:bc:32:e5:19:88:9c:0d:e0:d3:
35:0a:56:0b:74:8d:19:61:47:02:51:4f:ff:6b:3a:
cc:36:65:53:32:59:6a:66:1f:88:6f:09:50:2b:e1:
40:f0:f5:aa:60:0a:a3:6c:45:2d:2b:c6:79:d0:15:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:D1:ED:CE:5B:A9:49:F9:24:4C:AA:27:57:B6:43:55:3F:F3:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2f29cc0-0990-39a7-9c1e-0125a6af6616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:31:02:69:8f:e2:86:01:ed:86:97:df:4d:b1:f3:22:4c:46:
49:7c:7a:46:51:91:30:ea:4c:4d:b2:e2:cd:cb:a4:34:fa:06:
2c:7a:ce:cc:53:7b:d0:7a:a4:37:e1:dc:28:57:e1:cc:b6:48:
79:78:68:f4:32:a0:5b:d7:a6:bc:15:69:34:a8:b4:32:2f:c0:
54:5d:b6:ee:43:67:9a:a0:d4:5b:e0:80:6c:27:d3:9f:35:64:
52:0c:1c:5c:89:30:fa:17:89:3f:11:10:08:67:9d:6c:0a:96:
23:e9:fd:da:8f:86:58:e2:05:2b:b0:6a:fd:fa:a0:e7:dd:8a:
1c:43:0d:85:32:a9:47:85:db:8b:ed:db:9e:82:4d:8e:84:1d:
29:e7:6b:10:6e:86:1e:8f:27:af:22:7f:63:b5:88:90:5c:24:
74:e2:2e:12:11:73:73:ba:1e:e6:23:19:09:52:eb:0a:64:a2:
ba:c9:bd:4f:4a:f9:36:b5:9f:c1:a2:5a:ee:ee:6e:18:41:05:
28:ed:6c:c6:f6:00:ae:07:fb:9c:61:02:a8:dc:f6:aa:9a:b0:
a4:98:2d:a6:48:6b:12:e2:7e:df:29:52:b3:21:bd:fa:cc:cd:
3b:07:14:e6:77:c6:64:dc:fe:20:ba:7d:17:09:5a:52:f4:1f:
f9:fd:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:50:45 2025 by rpki-client