Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f78aab99-6f8e-3fea-957c-9e9cb4009d4d.roa
File: f78aab99-6f8e-3fea-957c-9e9cb4009d4d.roa (raw, json)
Hash identifier: Gcd/0xN1tQLswgUBqm0p7SJZqkCQ2ZldoI6EKLuOzL8=
Subject key identifier: 4D:00:37:2A:8A:9C:8F:0D:CB:E6:DB:0B:88:CD:E1:2C:BD:59:A6:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0874AE8B284150233EDF40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f78aab99-6f8e-3fea-957c-9e9cb4009d4d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.196.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:08:74:ae:8b:28:41:50:23:3e:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=abdc73f4-6496-4557-a230-d246dfcc1659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:e5:ac:a7:f8:79:91:03:ff:21:5c:78:05:
5e:12:f4:38:5d:75:74:39:7f:e3:28:f1:86:0f:9d:
70:e5:af:03:aa:db:e0:de:f9:17:51:f2:5c:5d:47:
f9:eb:59:3e:a0:f8:11:f5:dc:43:6f:a0:25:4d:d0:
f0:ed:5f:ce:94:e8:98:b4:77:af:da:a9:f8:6d:c5:
bc:d3:12:e6:3b:8f:9d:a5:1a:b1:17:dc:fb:ba:de:
da:b0:0e:fc:d8:53:41:34:2f:bd:1a:ac:4f:c7:4b:
fa:7c:e1:c3:4a:4d:28:5c:1a:7f:a0:09:22:58:ed:
8c:46:60:64:db:7d:58:47:3e:5c:a0:84:8f:24:a8:
f4:b3:0a:58:c7:7d:16:32:17:39:55:68:3d:9e:28:
02:df:61:c5:26:30:25:be:65:5e:88:86:64:92:0d:
f6:65:47:54:68:42:b3:33:cc:16:63:ca:8f:f6:a3:
fb:22:16:cb:cc:cb:27:11:3c:3a:08:55:a3:4d:e3:
ac:c3:1a:2d:26:eb:e8:af:00:49:c7:b0:78:07:10:
6b:af:da:58:d0:3d:63:53:3f:23:3b:5e:21:b1:fc:
73:9e:68:0b:e8:15:d8:2b:73:3b:b0:52:cf:e5:7e:
2b:e8:5d:74:01:41:72:ad:e1:43:82:57:95:98:d0:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:00:37:2A:8A:9C:8F:0D:CB:E6:DB:0B:88:CD:E1:2C:BD:59:A6:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f78aab99-6f8e-3fea-957c-9e9cb4009d4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.196.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:f3:6d:21:8a:3d:c5:26:ab:43:42:a4:f1:30:75:7c:3e:ba:
3d:99:b2:93:4f:15:9a:7a:c8:98:1d:45:f4:0a:b6:e9:b9:9f:
4d:84:44:ff:71:a4:55:6c:70:af:18:d3:6d:61:9d:13:22:75:
14:1b:24:5f:95:c2:0f:08:c9:ab:98:1b:f7:df:90:b3:a1:5d:
2a:bc:1f:76:0e:ec:3b:f9:c0:a4:eb:09:48:e4:64:b3:c2:80:
1b:b0:03:50:06:a4:a9:13:87:a0:80:0f:63:a8:1f:1b:3b:78:
d7:ac:c7:48:4b:e9:ce:c8:67:4b:61:55:cd:d0:39:73:e6:4d:
5e:f0:1c:8b:54:3a:74:91:4a:09:1a:1b:52:ea:ed:6b:1b:8d:
01:b0:07:ed:1b:e2:34:9a:88:67:c3:e7:32:e6:7e:6e:6d:ff:
7d:11:7f:0a:6c:87:7f:d0:e9:4b:96:6c:20:1c:30:d0:24:5a:
ed:8b:22:6b:7b:6e:c5:a7:02:af:26:0b:9d:99:d3:a9:d6:8f:
e2:f1:d8:6b:0d:55:6f:3c:37:be:c0:8e:55:62:26:45:1c:06:
da:93:ed:7c:a9:99:65:f1:9b:6e:8a:2a:1b:f9:21:be:3e:f5:
c8:be:53:2e:f4:6b:04:25:ea:9c:a5:54:89:d3:92:48:2b:6e:
8a:3b:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:38:27 2025 by rpki-client