Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3dd9dcd-4854-3834-adf2-192b11177b99.roa
File: e3dd9dcd-4854-3834-adf2-192b11177b99.roa (raw, json)
Hash identifier: 1nQObQrAddfV//pkn2ql7UeL0tDphKAuPKzOPjs0CHw=
Subject key identifier: C9:9E:7F:4D:73:20:F4:B0:DD:00:8D:2C:81:95:CE:F5:0E:0A:0E:59
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A218C217BC3A7C9EAB93DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3dd9dcd-4854-3834-adf2-192b11177b99.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.198.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:21:8c:21:7b:c3:a7:c9:ea:b9:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=88a4574c-6ce8-4d41-8840-d03a8f33e0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:ba:9a:44:51:c9:80:fc:f7:67:1d:d9:2d:
68:db:ca:da:22:f9:32:5c:6b:54:26:2a:ca:e2:5b:
4b:ca:16:9e:a8:d0:99:4a:5c:c7:9f:b1:b8:d5:90:
28:c7:7a:61:73:1b:4a:f5:0a:70:c8:fd:88:c6:94:
c0:02:2a:a3:24:86:60:94:60:82:d3:a5:b3:86:4e:
56:75:de:39:be:36:3d:c8:d2:a8:39:57:46:d6:e2:
70:aa:7c:e0:aa:10:98:48:f1:ad:61:f0:69:26:c2:
1e:80:dc:b0:56:e6:6b:3b:c5:e0:1e:81:f6:b4:ad:
f5:f8:1b:88:64:5c:bc:82:ab:77:44:7a:91:d5:d5:
d7:ad:be:02:cf:82:78:4c:29:f6:05:5f:be:e9:92:
4a:31:e2:ef:73:0f:ca:ec:12:e7:28:d6:c8:fb:3a:
62:fc:3a:09:6c:4a:8d:95:03:07:f9:db:97:8d:2a:
db:32:b3:ed:7c:c8:e7:16:3c:fe:45:60:f5:da:df:
4f:c8:e4:06:71:a8:1f:07:bb:a7:e4:ab:8c:c4:ca:
00:df:79:39:3a:60:3b:5a:2b:f8:ad:2e:39:28:b0:
d5:36:c2:f6:b1:a3:a4:4b:70:c5:32:90:62:ef:ca:
bd:ec:34:ac:00:17:7b:02:04:4f:b3:a6:12:c3:53:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:7F:4D:73:20:F4:B0:DD:00:8D:2C:81:95:CE:F5:0E:0A:0E:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3dd9dcd-4854-3834-adf2-192b11177b99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.198.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:2f:24:b5:2b:1b:0b:f2:69:8a:ff:fd:78:c5:df:f4:70:dd:
b7:ae:9c:fb:1d:3e:94:2d:6e:82:9f:de:52:91:0a:6b:c1:b2:
85:21:ee:10:47:df:7b:94:95:c6:84:83:70:7a:f1:89:71:8c:
d3:f4:87:8e:f6:d8:3d:77:b3:42:40:65:e0:3f:a0:14:98:3b:
32:30:03:e4:da:0e:aa:ae:f8:59:dd:68:c4:64:e7:bc:84:c7:
0c:c4:20:5d:81:e1:e8:85:35:75:5a:1a:11:bc:a8:da:ab:d4:
21:8b:87:3b:f7:a1:c9:15:07:1e:90:23:94:1f:9a:1c:f5:c1:
ec:04:25:fd:67:23:03:f6:c5:63:48:02:77:d1:fc:c7:99:25:
ce:67:76:fa:3c:c5:e4:8a:c8:2d:24:27:43:ed:c1:f3:8e:20:
4c:20:e8:bc:09:8c:93:f0:3e:d7:91:d9:5b:da:3f:44:88:e5:
61:c8:d6:3d:34:0e:fc:ea:58:c3:cd:05:5f:28:fe:2a:04:3c:
80:43:40:49:91:22:ce:23:a8:28:16:b4:f0:24:16:36:69:ef:
10:0a:4d:cb:83:44:ff:33:0d:ca:1f:e0:88:cc:11:0a:b6:0f:
5a:be:82:4a:8f:2f:84:12:68:e6:1c:e6:c1:d6:ed:4d:72:fd:
29:3d:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:26:41 2025 by rpki-client