Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d38daec8-8034-3edd-8715-e3ae69ad6dff.roa
File: d38daec8-8034-3edd-8715-e3ae69ad6dff.roa (raw, json)
Hash identifier: IuWs5ptYalphumXOyxh3I4B0ym2a+hFhfIx3LZ8dqM8=
Subject key identifier: 16:D6:4B:4F:5B:5B:2C:99:F0:22:61:98:56:F9:80:6E:A4:E8:1C:7B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A17584FA6EF972D57B47F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d38daec8-8034-3edd-8715-e3ae69ad6dff.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.204.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:58:4f:a6:ef:97:2d:57:b4:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=144fdba0-65df-4b25-867c-2cd9f17a35b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:dc:fd:e5:02:cd:50:9c:4a:92:09:af:7a:
e3:8f:0b:bf:45:99:fc:36:ff:fb:ab:a2:0a:cb:a2:
03:07:95:c1:f5:b0:75:06:33:78:98:6d:0f:6e:99:
54:54:9b:77:07:54:c9:d9:0f:54:42:0f:e4:ce:7f:
60:30:5d:ed:41:39:c9:f6:80:76:27:60:aa:5a:5c:
a7:25:5e:fd:4a:a2:38:08:92:96:8d:59:7e:cc:7c:
aa:18:e2:38:65:fc:34:9b:5e:e6:86:d1:1b:d2:81:
f6:3b:54:7d:fc:0b:cc:27:a0:ed:86:e8:fd:0d:ec:
7d:da:a6:66:83:07:d4:02:5d:21:80:90:2c:7f:c2:
4a:28:c1:0a:2d:26:2f:04:6b:a1:09:e7:3d:39:4f:
ad:b5:ff:a6:fa:ac:74:f5:95:01:4d:18:73:97:8d:
1e:24:8b:eb:fe:03:7a:25:07:cd:70:6d:9d:c8:1b:
2d:5e:9c:af:27:cd:b9:4a:86:e0:d4:10:a7:ff:46:
3a:04:49:e0:6e:b2:5a:36:80:80:d6:ea:a7:a4:54:
a0:2a:95:9b:fe:8b:1a:b6:26:56:14:2d:45:11:d9:
6f:b9:93:03:e6:98:78:d8:9e:f5:17:e6:07:05:4b:
2a:dd:15:c3:c1:cc:a9:0b:f8:8e:45:80:5d:2e:41:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:4B:4F:5B:5B:2C:99:F0:22:61:98:56:F9:80:6E:A4:E8:1C:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d38daec8-8034-3edd-8715-e3ae69ad6dff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:ba:72:60:79:2c:19:ca:0b:6c:1a:ad:94:30:5e:25:e7:2f:
d6:e0:d9:28:2d:22:b1:36:7c:a1:1b:37:56:3f:3b:bc:ef:57:
18:95:07:f4:f1:91:eb:1d:aa:e3:b7:84:36:62:d8:21:9a:57:
6e:5f:ae:d3:73:2f:d8:32:12:5e:42:78:7c:6f:a3:6e:07:79:
af:be:8c:0f:04:88:54:e7:72:32:94:7f:f4:91:3a:7e:7d:db:
81:3a:fa:54:84:ef:68:c1:5f:86:3b:83:14:d6:db:ad:ec:35:
4e:98:1e:d0:1c:a0:0a:aa:3b:f0:02:db:8c:00:72:49:98:2c:
3d:84:6d:9e:54:70:2c:25:e7:eb:76:78:0b:76:3c:d7:ac:7a:
38:01:41:7d:23:4b:b0:bd:37:15:ef:ae:f6:e1:09:ec:06:bd:
ce:fe:b3:bb:8c:af:79:7e:c9:46:21:25:04:87:fe:9a:2c:b6:
d0:5f:8e:25:d0:8e:95:7c:16:21:64:69:25:33:15:d2:3d:2f:
21:c4:e2:09:6e:6d:d4:08:ab:6a:8b:9f:65:ec:02:01:ef:c2:
2d:48:b1:15:6d:7a:40:d1:a9:8d:95:81:93:a8:97:00:d6:aa:
37:28:96:11:d8:ec:a4:ec:c7:cd:90:e1:45:ac:a2:2f:6f:f1:
84:f3:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:40:53 2025 by rpki-client