Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4038e55-d20d-338b-9281-86eca9869092.roa
File: d4038e55-d20d-338b-9281-86eca9869092.roa (raw, json)
Hash identifier: 6uuvoYRGSG2mGvJRUVwZ9qgiQPTrnLA5MBYPgQp8zhM=
Subject key identifier: 38:FA:49:61:B8:2F:08:01:2F:BF:13:5E:00:62:A4:FD:80:A5:E5:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309ECA670FED9746E9493D200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4038e55-d20d-338b-9281-86eca9869092.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 19527
IP address blocks: 35.206.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:a6:70:fe:d9:74:6e:94:93:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9d31394f-c4b1-4d60-ad19-d404f07bebff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:93:73:b2:75:6e:8f:fe:a9:0c:46:0b:03:
a2:6b:54:f0:70:61:42:f4:86:8f:b3:81:fc:ac:15:
8a:ff:e0:6c:75:3f:3b:2f:fc:9c:cb:b6:cc:e3:58:
38:b5:d2:c2:1a:4a:42:fa:9e:60:8d:3f:2d:58:b5:
8c:e2:8f:65:86:ef:81:64:48:cd:2d:9d:f4:42:3e:
d8:3c:f6:36:e7:7f:06:22:38:a4:a8:59:d5:c0:b7:
e8:87:28:47:b1:e6:fa:57:ff:0d:3e:e7:e8:a0:70:
1b:39:42:5c:fa:05:68:fc:a9:ad:65:47:85:f4:86:
8a:0e:8e:ee:17:77:70:1b:2e:d9:3e:2f:50:2f:c3:
f1:fb:04:79:54:fa:7b:68:8f:be:a8:72:63:cd:6c:
31:b0:21:58:1e:4e:cf:18:cc:a4:2b:22:fe:5a:fa:
94:80:e1:5b:0c:64:97:8b:84:b0:1f:82:88:63:bb:
4a:0f:93:e3:63:08:88:d7:3a:de:bd:c4:c4:df:4c:
79:8a:e4:81:0e:af:36:f0:e3:5d:4b:ab:21:dd:18:
44:6a:b8:90:d5:8b:34:5a:c9:f3:e3:b7:99:cb:a0:
df:d7:7a:48:b7:13:c9:72:61:db:06:28:65:1c:fd:
02:a4:67:5c:1d:b3:0f:46:3f:c9:b2:c6:ec:8d:9f:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:49:61:B8:2F:08:01:2F:BF:13:5E:00:62:A4:FD:80:A5:E5:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4038e55-d20d-338b-9281-86eca9869092.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:95:d1:49:da:40:ab:3d:14:03:5e:b6:75:7f:6e:b8:ea:75:
a1:18:af:fd:10:0a:ca:8d:a7:69:ff:67:f9:18:64:63:b4:60:
cb:29:10:60:a7:8d:ef:7a:0f:ae:05:53:5d:2a:80:67:2f:4b:
15:2c:11:ca:69:ac:1b:29:27:23:a5:82:bf:3a:b3:8f:5e:2c:
ac:ca:4c:de:56:ce:b2:b4:e0:ab:6c:cc:02:b0:4f:f3:93:6e:
ad:1f:a0:9c:d0:25:9c:94:bc:c8:09:ef:0a:db:05:4e:05:91:
fe:fb:69:ab:16:6a:f9:9f:46:b4:a0:fa:a1:dd:ef:00:87:f5:
b1:33:c8:04:55:34:72:fd:3b:4a:46:ee:3e:75:64:66:a9:02:
ba:14:b8:0b:c9:29:e9:85:98:c8:5d:a6:89:7e:d4:0f:0e:9a:
eb:f3:ed:2b:6f:3e:06:37:6c:14:e3:2f:34:8d:16:38:f5:c8:
d5:9a:d3:c3:03:5c:f2:2d:6d:35:35:b8:1f:2b:0a:f0:4f:9b:
2e:68:f4:7d:3a:48:42:d7:cd:b8:25:2d:dd:9d:a3:06:c3:5e:
d2:7a:06:69:ce:e8:17:b7:4a:64:14:51:1e:1f:78:53:3a:6c:
fb:1d:be:01:ea:1b:3e:95:be:59:30:0c:9a:b7:bb:9a:a4:e8:
b9:99:9d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:29:13 2025 by rpki-client