Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd27c4e7-37e4-30c8-b377-7c2a0545bf81.roa
File: dd27c4e7-37e4-30c8-b377-7c2a0545bf81.roa (raw, json)
Hash identifier: zxjzWYY47EJKeBRajbG4n1LIpiFAaMaerCrLBZXW+mw=
Subject key identifier: 8A:90:4F:6B:6D:07:E6:F3:73:EC:2C:92:C8:A0:30:D8:E9:02:94:AD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A121F8E35E9E96D2CDF6880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd27c4e7-37e4-30c8-b377-7c2a0545bf81.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.203.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:1f:8e:35:e9:e9:6d:2c:df:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=695f12b4-68f3-4f7a-85e8-425607d13de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:e8:17:e0:4c:76:fc:62:38:c8:72:4a:cd:
c9:c2:a4:b3:7c:03:26:55:33:db:66:e1:f9:95:23:
6a:66:53:19:4f:e3:e3:35:a5:b5:95:e6:19:c8:a6:
80:bf:52:50:67:53:aa:c7:2f:fc:d4:74:1d:5f:87:
21:be:83:a9:19:30:5b:e0:1d:2a:fe:85:32:55:87:
ac:fd:24:df:07:c5:f9:d1:db:a0:04:cf:2e:b4:90:
b6:0d:e5:b0:f7:8c:e0:1e:4a:68:88:6a:19:ee:20:
50:71:aa:78:e6:c0:29:f4:b9:37:9c:7c:11:7a:9b:
29:9a:99:e4:bc:29:98:9d:17:f0:12:7d:e3:0c:9b:
c1:98:93:ed:fa:a9:89:88:2e:db:01:af:82:bf:7c:
df:1f:27:b9:19:ef:81:e1:25:2e:0a:0f:ed:67:97:
88:7b:fa:9f:15:9b:15:c8:f5:93:00:8e:40:ff:7b:
3c:7b:c0:db:71:c7:ad:6f:9e:8f:76:dc:6a:6a:d9:
40:3e:d8:1d:6f:f5:58:13:b5:aa:f3:51:e2:fb:94:
12:c8:6e:55:67:14:77:4f:b3:40:84:11:31:db:85:
68:0a:65:51:e9:4c:c7:23:98:d9:1e:a4:b8:e7:eb:
dc:f4:45:52:9a:43:09:18:98:a8:c9:ea:1d:e0:f0:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:90:4F:6B:6D:07:E6:F3:73:EC:2C:92:C8:A0:30:D8:E9:02:94:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd27c4e7-37e4-30c8-b377-7c2a0545bf81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:bd:c7:f6:7c:54:86:71:ff:9b:12:22:a3:80:39:90:ce:0e:
74:f6:19:c3:d9:51:3d:19:f2:fc:d5:05:cd:6e:20:d2:9c:e7:
b9:68:25:41:b5:d5:f4:a4:ab:37:97:c5:e3:e3:b9:5f:8c:cf:
dc:14:50:6c:a4:2b:52:3d:fc:14:85:d1:4e:3b:ce:11:22:6e:
d2:d7:c2:93:08:8a:7a:98:87:00:24:88:b6:25:32:68:83:fd:
f3:f1:7d:dd:5c:81:83:cb:cf:10:fa:dc:84:0a:34:6c:f2:66:
11:e7:63:52:b5:bc:34:7f:4b:75:8b:88:96:ed:2c:c7:1e:a1:
d7:9a:b8:de:63:b6:11:42:fd:ec:c3:ce:95:ee:88:6e:e3:5c:
c4:48:9a:5a:23:33:03:f7:fb:f3:5f:e3:69:9b:ef:26:dc:cb:
a6:43:ba:3e:ed:bc:d6:e2:4a:07:02:b3:0f:5d:5a:36:ff:18:
a3:25:17:0d:f6:df:91:b6:05:82:ed:5b:1a:b9:e4:e9:29:f5:
92:5f:51:7c:e1:5d:c5:58:d3:7f:5f:56:c7:68:50:42:83:7e:
37:a2:07:12:89:8e:36:99:fe:5f:6f:49:63:85:a8:0d:db:f6:
2c:26:90:ed:60:d9:36:ee:41:98:d7:44:d1:45:bd:c8:1b:df:
65:c1:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:20:17 2025 by rpki-client