Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d67cb6c4-7336-3cd7-91d3-3a199ce84a8e.roa
File: d67cb6c4-7336-3cd7-91d3-3a199ce84a8e.roa (raw, json)
Hash identifier: nAzCSr4cD5/OE5mil1y2d6YKrKN5Fr5ZgKySbAZdnhk=
Subject key identifier: C8:56:52:E2:4A:F6:38:24:6E:C4:FA:EA:34:E6:D2:A0:B8:6E:9D:01
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0DA14CB1582D93BFB89B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d67cb6c4-7336-3cd7-91d3-3a199ce84a8e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.235.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0d:a1:4c:b1:58:2d:93:bf:b8:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d1a06e2b-8d7c-4c87-9ad5-25f22181a5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:99:22:4b:2f:b9:fb:7d:ae:74:24:5c:9f:
2b:80:46:e3:9b:60:2b:53:ac:2c:70:9a:4c:29:46:
85:97:89:71:46:77:d8:a7:90:ed:80:14:43:9a:4f:
5a:4f:50:91:8a:bc:5b:9a:3f:0c:35:1c:88:39:f5:
97:9c:a6:b5:24:d0:c2:48:83:e0:ac:ed:5d:66:23:
99:a5:9e:ea:0f:f6:89:81:91:3f:ab:2d:31:84:b4:
32:e3:f0:36:77:72:be:e2:08:52:38:5e:a6:72:7a:
f1:d7:61:37:7c:05:44:78:1f:b7:b0:b6:82:c5:e6:
57:8b:89:c6:c3:7c:ed:3f:ae:24:3b:bb:d6:0a:ca:
67:b0:be:5a:22:54:a9:3a:b8:a5:e2:cc:79:15:06:
c0:0e:1e:5a:40:2c:94:60:b0:3a:82:9d:71:2d:aa:
1f:91:f6:c7:12:b9:2a:53:03:f2:2c:3f:86:8c:6e:
48:0f:71:ff:4d:ac:bc:1d:ba:4b:3e:c0:d5:d8:ed:
80:3d:f8:27:56:1b:cc:fe:ee:30:b7:88:b7:f5:ba:
ed:3c:51:0e:5a:18:02:1c:92:7f:18:36:0c:18:68:
26:87:dd:2e:68:03:61:43:d9:8e:21:97:3b:a3:91:
24:d5:51:11:02:94:e0:60:f0:b9:03:ca:0d:66:29:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:56:52:E2:4A:F6:38:24:6E:C4:FA:EA:34:E6:D2:A0:B8:6E:9D:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d67cb6c4-7336-3cd7-91d3-3a199ce84a8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.235.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:c8:b6:90:ba:97:82:03:cd:44:c4:f1:fb:9c:a3:97:38:64:
17:49:09:f6:14:34:63:c1:66:69:9d:0c:72:0f:0b:53:4f:68:
27:2b:aa:6c:e1:39:3f:07:56:b5:9a:90:39:9f:8a:16:eb:2b:
1b:2e:7a:ed:80:f1:de:e9:f3:6a:b3:5e:a7:5f:b7:b8:7f:0b:
7c:f3:14:08:80:b9:03:c6:32:44:f0:f7:09:8f:74:2b:ae:4e:
94:34:e9:4e:45:d0:f4:d2:cc:67:47:45:0d:11:a1:e5:78:df:
e3:b3:31:f8:4d:b4:1a:f7:58:8e:57:fd:be:a3:d5:c2:d1:c6:
44:b0:6c:d5:1f:01:58:fa:e6:cd:97:d1:f2:1a:41:ba:44:bb:
a6:3f:9a:77:26:37:58:f2:6f:12:7e:e8:91:84:50:19:28:97:
2d:00:9b:52:4f:1c:a0:6e:e6:5c:b5:40:0a:a0:e3:22:99:e1:
82:46:ed:03:2a:4c:ca:b6:62:be:69:93:b4:2b:75:0c:c1:6f:
d0:38:6a:21:fc:d6:d8:9f:f3:e0:90:b1:81:21:e5:67:55:03:
2e:5d:cc:e3:c9:2b:85:05:f6:c0:04:cd:3e:d4:f4:63:40:48:
3d:76:ce:36:28:28:57:97:42:97:3d:dd:03:7b:f3:f9:3f:59:
a6:a9:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:02:06 2025 by rpki-client