Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6d4ea24-511a-344e-babd-6ff26905d3be.roa
File: d6d4ea24-511a-344e-babd-6ff26905d3be.roa (raw, json)
Hash identifier: I2coYa9RzS+kWf9TwGSxrZtMH6R/ChN0Cek1se2ZcHc=
Subject key identifier: 43:6A:8D:B1:DA:53:4F:BE:05:2D:7D:60:2A:E6:38:C4:67:BC:72:22
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A277124B2947B015B001300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6d4ea24-511a-344e-babd-6ff26905d3be.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.238.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:71:24:b2:94:7b:01:5b:00:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c7a05d48-17d6-49da-b3a1-cd93bbc0cff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:cc:8b:e9:f8:9e:ff:f0:4c:42:12:0a:d0:
c1:19:d5:e0:b1:0e:46:14:78:39:fa:a2:27:6f:1e:
94:6c:cb:64:ae:d8:1f:ed:1a:94:54:80:5c:b5:23:
c4:b2:2a:a6:58:40:58:89:bb:28:78:11:24:ed:ea:
04:27:55:bf:48:6d:7f:76:38:ed:03:bf:76:af:5f:
58:73:bd:c1:10:d2:14:f3:09:a5:b7:a0:1c:da:3e:
d6:5c:e4:1e:76:ef:d9:77:ab:de:5f:b4:9c:d2:f3:
81:a5:63:8e:9d:dc:41:6b:0c:8d:da:0f:dd:e4:85:
2a:b6:c1:a3:52:53:6d:aa:99:48:24:2a:f6:a9:b6:
26:b6:46:f0:53:9b:84:1d:2c:7c:9b:8a:1d:be:6e:
01:b5:01:88:83:87:4a:8d:fa:86:be:bd:c0:40:b2:
12:f6:09:90:b8:9e:72:bc:b2:1f:3e:80:13:a1:62:
d0:c0:4a:35:07:a0:47:39:20:cc:5d:fe:1b:28:7a:
33:15:b5:4b:32:1e:53:9b:2a:2d:f5:24:da:2d:17:
3a:f0:69:d3:f4:28:c2:63:ea:bf:28:b0:a1:4b:dd:
02:ef:fc:d9:6a:ad:50:b2:08:af:d7:4d:51:6c:cb:
ff:f1:ae:40:3a:f0:13:c5:fd:a1:ed:e9:0b:2e:6d:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:8D:B1:DA:53:4F:BE:05:2D:7D:60:2A:E6:38:C4:67:BC:72:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6d4ea24-511a-344e-babd-6ff26905d3be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:0d:8e:6c:67:99:b3:a9:08:05:22:2f:19:e7:a1:3f:0c:c5:
35:3c:fb:0d:36:7d:1e:c6:77:39:06:5c:8b:2f:b4:58:cb:3f:
35:8d:a1:cd:6b:36:a9:19:3f:cb:37:69:65:f1:f1:f7:de:66:
52:28:36:0c:0d:9a:cf:de:1d:c0:ae:df:70:90:09:b4:68:9b:
ba:25:a5:dc:6e:db:ca:f5:5f:6c:ba:4d:4e:dd:de:16:f4:8e:
f6:17:61:89:1d:73:bc:30:e0:f8:7c:30:b7:54:b5:f4:92:3f:
3d:e4:22:2e:1a:4a:ad:7e:00:02:11:17:3c:64:e8:c4:9e:9e:
7d:eb:b5:44:c3:68:72:21:81:2f:19:4d:0e:ca:c2:31:93:ac:
a9:67:e7:64:99:11:7d:84:39:c6:d1:5b:c5:ed:80:80:b8:77:
09:f2:6c:84:8c:de:9d:be:70:78:ef:65:27:ce:1d:80:4a:b3:
24:66:b6:59:5e:a0:97:4d:29:67:27:14:ae:5e:c8:26:e9:7f:
cc:de:34:f0:c8:15:57:e8:d0:86:bc:d5:3d:63:17:5c:a8:8c:
23:e9:3d:6b:9e:3c:d0:64:68:af:59:db:41:0f:ac:01:37:0e:
c5:b7:9b:ad:16:70:93:c6:06:a1:a9:44:ba:e4:0d:bc:35:29:
6e:40:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:09:56 2025 by rpki-client