Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f843b4dd-aa47-33dc-857c-a8ac6a00d8f5.roa
File: f843b4dd-aa47-33dc-857c-a8ac6a00d8f5.roa (raw, json)
Hash identifier: OpYP7CIP/SCqdhq+IXiu1QSLmjpXpFZIUKOvi4jDr04=
Subject key identifier: A8:43:EB:87:CD:22:C2:9B:4D:AD:AD:45:C0:09:61:4B:2F:04:76:84
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FB0EE97807965C578BB870
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f843b4dd-aa47-33dc-857c-a8ac6a00d8f5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 35.187.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:0e:e9:78:07:96:5c:57:8b:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3af4f565-1d61-47cc-a0b2-6ca31a294bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:b9:8f:f2:73:e2:3a:46:6c:22:40:68:17:
6b:84:14:da:c4:4a:7c:a9:4b:71:d8:5e:fd:e7:25:
0f:6b:c9:df:dc:dc:ad:64:16:08:07:fd:02:ae:56:
ba:1d:2e:e0:0a:be:dd:9f:74:ad:fb:4f:ab:af:6c:
18:8a:7f:44:83:66:71:96:87:a2:df:f3:18:c0:8a:
95:72:b5:be:02:16:9c:3c:77:46:a4:7d:a5:f6:04:
ba:2d:dc:d9:26:6a:48:66:58:b3:57:be:16:ef:74:
d2:d1:5a:00:de:c3:8d:1a:a8:f1:9f:9a:b3:ca:4e:
d3:bb:99:27:65:81:e7:dc:15:3e:dd:b6:68:a8:b1:
33:58:79:14:bd:b7:1c:49:a6:8e:41:93:78:63:53:
95:cb:a3:ea:76:d5:ec:29:01:94:33:8b:16:12:04:
31:ca:a1:c3:c7:0a:b4:29:ed:f1:26:ef:ed:06:a8:
25:a3:18:77:8e:7c:d0:67:94:46:1b:a4:02:9b:b7:
d8:28:17:68:e8:a6:86:ea:62:61:7a:e6:ba:11:36:
b0:4f:14:7b:fb:d0:01:cf:43:c3:90:72:60:40:71:
fc:1a:97:23:fe:f7:c8:9c:27:56:c9:59:14:4f:d9:
6f:16:ad:a0:d1:e9:78:bf:d4:ce:b5:f5:78:8a:ca:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:EB:87:CD:22:C2:9B:4D:AD:AD:45:C0:09:61:4B:2F:04:76:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f843b4dd-aa47-33dc-857c-a8ac6a00d8f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.187.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:2d:77:8a:4a:37:61:66:64:1d:f5:5c:09:b6:fe:6b:94:fb:
14:bf:a9:46:ee:3b:c5:0c:fc:31:f8:bd:fc:43:ff:96:35:4e:
0c:b1:16:7d:3f:95:a9:a5:7e:32:40:c2:c9:9b:d1:dd:12:77:
e1:3c:a0:de:9e:7c:41:6b:ef:2c:11:86:3e:b0:29:cc:39:2c:
76:d8:b3:d0:3c:55:a5:0b:2a:f7:96:98:36:a9:1b:c6:3c:51:
8e:6d:81:15:27:24:ba:e6:1a:81:83:96:61:d8:ca:d8:6a:7e:
05:75:99:bd:9c:03:8d:6f:1f:bf:c8:ad:ae:ff:e5:fc:ad:c1:
55:7f:8f:19:39:d3:c9:95:a7:4a:6b:f2:a5:e3:83:35:e4:5b:
a9:0d:52:bc:14:37:44:03:b5:06:8f:e4:b7:24:7c:45:55:76:
d8:d2:33:0d:ab:3c:5e:81:fb:9c:80:26:16:6f:a3:30:80:67:
4f:64:77:5e:db:b1:e0:e5:f8:47:0f:0e:ea:a9:86:80:3f:86:
40:ad:20:7b:08:c7:e3:12:f9:a0:7b:dd:d9:dc:32:3b:c2:63:
a4:de:66:d3:82:c5:e4:a8:8e:bc:f6:c1:07:f6:09:98:22:3d:
08:a6:44:d5:8c:b9:50:29:8a:b7:fb:ef:8b:3d:1f:ee:50:29:
e8:0d:dc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:13:47 2025 by rpki-client