Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9e2ce3b-bbf7-393c-b79d-ea3ed9964720.roa
File: e9e2ce3b-bbf7-393c-b79d-ea3ed9964720.roa (raw, json)
Hash identifier: XSOe8j4PJ+GfHa0PbsOBcIOFsEdwFwiRL00wx1x2Fog=
Subject key identifier: 3F:32:96:F9:86:93:A0:A4:03:C8:22:84:19:05:70:A8:BA:78:C2:36
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0561FBA9275699BDF58940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9e2ce3b-bbf7-393c-b79d-ea3ed9964720.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.194.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:61:fb:a9:27:56:99:bd:f5:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f03dc08f-f63a-49ed-81e6-71bba7b987fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:a5:21:e0:46:f2:2b:97:11:fd:a0:6e:12:
1d:cf:a9:b7:24:25:b6:2f:4b:cd:1d:a4:78:dd:08:
d6:86:11:33:0a:07:ef:81:18:81:3e:e8:0e:30:f0:
45:d0:e6:af:58:55:a6:21:a6:20:6a:23:0d:5d:7a:
62:f6:d6:0b:0d:d4:5d:be:d3:19:54:ff:11:19:ff:
90:f6:6b:ef:8e:ec:76:9d:71:22:51:94:fb:6a:86:
87:d3:6f:38:74:80:bb:a9:e0:23:2d:a9:1b:44:96:
92:b1:69:b3:1c:9b:9f:c2:7e:ce:51:bb:4e:a9:68:
ae:77:5e:27:3b:8b:3c:71:f8:3a:c9:9b:0f:18:29:
e9:f4:da:7e:3c:5f:bc:c7:f9:a1:81:b1:c5:37:6a:
07:b0:4d:4c:7a:c5:99:4f:33:69:37:1b:09:bc:e3:
29:e9:b6:fd:74:d3:0a:78:36:2a:dd:c8:00:40:84:
d6:22:b5:5c:73:07:fc:54:54:27:03:4e:74:24:b4:
bf:99:1d:5d:c8:a0:5b:6a:04:8d:57:09:6c:10:41:
e7:15:61:79:49:06:af:2a:1f:93:ac:d9:04:72:65:
d0:e2:cd:a8:9f:3c:13:86:10:0f:07:a7:cb:ce:08:
37:54:13:b3:f1:92:2c:aa:3a:dc:49:1e:a8:d1:8e:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:32:96:F9:86:93:A0:A4:03:C8:22:84:19:05:70:A8:BA:78:C2:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9e2ce3b-bbf7-393c-b79d-ea3ed9964720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.194.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:89:d0:56:b2:ea:47:5e:93:95:cd:9f:ef:d6:c1:35:4d:ba:
95:a9:af:d7:83:4b:52:6d:b9:83:9c:56:30:57:57:4e:86:06:
20:d0:15:5f:97:10:1f:d4:1b:e5:f8:3d:2f:80:22:47:46:e6:
eb:2a:fe:ac:aa:67:97:31:dd:70:90:8a:78:81:ca:07:9b:3c:
8f:76:11:14:93:c2:b0:7e:b2:16:b7:7e:42:3e:69:41:6b:9e:
9d:55:1b:f2:21:68:2c:40:db:4a:98:8d:bb:0b:12:01:d9:d8:
f3:16:e4:4e:87:2b:7e:c6:47:51:fd:89:ea:8f:c6:f5:b3:3d:
f5:79:60:c8:cd:12:37:1a:d9:1b:d0:f9:ad:4b:82:c6:f6:6a:
42:c9:13:1e:c0:ec:8a:d5:8f:95:21:82:d5:1e:df:b6:7d:bf:
73:bb:7d:4b:11:5e:aa:e1:d6:2b:db:5a:80:95:25:28:c6:a7:
83:29:ea:33:cf:db:12:e7:3d:5b:24:f1:07:f1:90:05:dc:92:
7c:aa:c1:f4:34:57:79:2e:25:41:c6:1b:0c:e1:d0:25:af:4b:
2a:74:f0:a2:5a:09:cf:2f:33:70:8a:87:68:3e:8b:88:0a:60:
1f:02:68:28:76:4c:3b:07:2b:46:e1:75:f7:53:44:db:2f:6f:
30:b2:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:46:50 2025 by rpki-client