Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eb0a33f6-b500-319f-91f9-268a02e1d1c0.roa
File: eb0a33f6-b500-319f-91f9-268a02e1d1c0.roa (raw, json)
Hash identifier: I9yt5m/r3kgTT+pUG79t/weP3LZVsTL5n/jBA2M1C64=
Subject key identifier: 6F:23:CA:99:54:8E:FC:0E:F2:20:F7:EF:D3:8B:19:70:5F:E4:F8:3D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0551149D1A136C065CBC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eb0a33f6-b500-319f-91f9-268a02e1d1c0.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.202.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:51:14:9d:1a:13:6c:06:5c:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5909aa6a-24be-47aa-9219-6c3171a3d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:80:85:a0:5c:ec:07:02:c3:d4:cb:c2:66:
df:25:9f:83:da:fa:a3:8e:ab:b2:d4:a7:ce:a8:0e:
31:59:84:6d:64:61:98:6e:b4:0a:7f:a0:cc:fa:e1:
e5:d7:bd:97:c5:44:93:53:7d:c8:f1:a1:da:6d:5f:
db:9e:b8:da:09:ad:21:56:3a:83:68:af:21:d0:b5:
48:96:82:e5:56:7c:61:ff:4a:04:7f:88:bb:15:68:
f0:f9:ba:78:65:09:2a:a3:fd:18:ad:7d:cb:25:40:
56:22:5a:e2:36:77:f0:f2:6b:00:42:ef:bf:04:5a:
44:27:b4:1f:cb:1a:e6:a7:7a:52:70:5a:a3:c7:55:
43:09:03:ac:23:31:a1:b0:a9:e9:f1:0e:04:e4:30:
81:cd:47:a1:c7:7a:6b:0e:20:22:7f:ec:bd:be:70:
f7:3b:c3:43:49:57:97:99:31:0d:95:f0:93:23:a3:
a1:3f:a4:f6:65:a3:f4:6c:72:9b:65:95:aa:4c:95:
33:c7:d9:03:96:28:4a:73:96:d4:a4:a1:ba:eb:fb:
a6:a3:f6:01:ad:70:71:b1:b5:31:5b:fd:43:ee:d0:
5c:2e:a2:77:d3:fd:96:f6:1d:c1:20:ad:00:05:43:
b4:ed:57:08:25:b2:4d:41:a7:f6:86:81:b7:85:fa:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:CA:99:54:8E:FC:0E:F2:20:F7:EF:D3:8B:19:70:5F:E4:F8:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eb0a33f6-b500-319f-91f9-268a02e1d1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.202.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:9c:50:a5:df:3d:a2:c5:b4:35:57:16:95:d0:f2:b0:10:48:
b6:f1:55:e3:3a:b9:f9:51:3d:08:e7:b9:e4:9d:de:ed:9a:eb:
b9:2d:45:5d:ec:04:62:1b:c9:8a:d2:e6:e0:44:ca:41:4f:a0:
b1:3a:41:ed:d8:e2:ef:bc:19:53:e6:63:30:00:bf:cb:0d:96:
70:05:44:41:dd:e7:ad:b7:d5:7e:d6:87:e0:c9:d0:90:5c:b7:
14:80:fc:27:3a:10:22:f0:61:a4:56:60:d5:5a:85:cf:89:6f:
21:8c:67:2a:e6:34:3e:ad:61:e3:40:95:e6:de:1b:20:cf:47:
a5:f7:68:51:d1:17:57:03:71:02:81:90:32:f3:7f:f6:72:74:
1b:f6:97:89:4a:03:63:45:56:34:45:67:9a:b3:88:c3:bb:c5:
1e:42:39:92:bf:c4:3c:27:7d:62:ab:5c:84:d3:01:0f:c9:2b:
49:73:e0:1b:a0:8e:59:bb:87:99:4b:cb:32:99:c2:ff:e2:72:
6b:93:9a:c2:e1:d4:0b:2c:31:6c:46:51:b6:00:6b:5a:43:46:
51:42:2b:d4:ae:84:9f:78:1e:b0:2b:87:0f:b2:52:d5:9b:51:
8f:34:79:40:cf:53:ea:79:89:68:2e:cd:4c:a1:39:64:02:a4:
b4:6d:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:00:44 2025 by rpki-client