Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f853fc05-157a-3cce-9040-62fab863dc77.roa
File: f853fc05-157a-3cce-9040-62fab863dc77.roa (raw, json)
Hash identifier: 9jUkybBp/4ii7vgVSagEnl1QoMvmtEPNzkvm6DeFbmE=
Subject key identifier: F1:1A:0A:3C:25:8D:D7:65:BE:A1:09:9A:40:75:6F:70:E4:5E:0B:1A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F386CBCCED30D3F6AE2080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f853fc05-157a-3cce-9040-62fab863dc77.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.188.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:86:cb:cc:ed:30:d3:f6:ae:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=29b067fd-046b-4947-8380-ad2376fb764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:7b:b4:5f:f4:23:18:86:dc:17:67:59:e2:
12:36:bf:2d:f2:5a:b0:90:03:70:51:e2:dd:99:bf:
4e:76:67:08:41:6a:35:22:68:52:c9:8e:b5:6b:4d:
fd:44:b7:3f:c6:6e:a2:8e:cc:e0:e8:aa:fc:96:1d:
75:8b:09:04:66:d6:10:09:86:e0:54:58:c0:0a:98:
ec:29:02:79:0d:bc:3f:2f:3d:26:e8:aa:d6:32:88:
d1:f9:d5:30:a3:65:e5:53:5c:b0:74:3f:6d:76:5d:
23:85:f1:43:14:29:4d:62:c1:51:ea:9a:cf:64:95:
70:e6:da:a7:bb:2e:a5:92:2c:02:62:fe:ae:3c:6f:
fb:20:0e:a7:01:3f:bd:a5:a5:20:08:ae:4d:ae:44:
a8:f5:db:78:80:b8:af:82:d8:4a:76:8e:e3:f1:e2:
18:27:7a:6f:5d:83:47:f8:d0:dd:e5:82:26:c0:bc:
ea:75:70:e6:b9:1f:36:56:23:8c:5c:ab:be:99:a9:
73:24:c5:01:13:36:19:a3:ed:f5:1b:3e:53:66:1e:
e2:c6:64:54:2d:c1:6b:30:a6:6c:23:a5:9b:6c:4f:
b9:44:d7:7d:2b:d1:97:17:55:26:e6:06:ab:b6:da:
20:6d:ad:35:e2:94:3e:09:43:96:03:33:07:cc:8d:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1A:0A:3C:25:8D:D7:65:BE:A1:09:9A:40:75:6F:70:E4:5E:0B:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f853fc05-157a-3cce-9040-62fab863dc77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:32:dd:29:fb:3c:47:7f:f3:db:71:6e:ef:57:61:02:a0:3f:
75:bb:96:32:96:1f:19:64:ad:7d:d5:a4:67:4a:9d:69:5f:e5:
42:76:5c:65:42:91:01:b0:73:62:49:5c:8e:2c:77:41:64:41:
a9:56:1b:4a:4b:72:60:b7:94:f4:29:18:f7:d5:99:9d:a4:bb:
74:33:0d:01:ee:8e:31:0d:c7:a5:5a:37:fb:bc:ae:0f:57:4f:
dc:cb:e7:97:82:06:f5:39:28:18:ac:a4:ee:5a:97:aa:76:ff:
0b:fb:e0:01:15:8c:11:a0:cb:d2:aa:35:ed:c8:0a:40:0f:da:
0d:87:4a:b4:b5:f4:85:1f:97:60:60:27:62:50:4b:c5:e8:c0:
d3:46:2f:5a:19:b7:bb:fb:99:c6:6e:f4:a0:50:05:bd:d2:ad:
2d:e8:3f:07:11:6e:16:8e:6a:f2:b0:56:63:d2:6a:1f:30:54:
9e:d0:88:df:c5:5a:2b:82:f2:34:20:9b:3c:2d:fd:ac:b0:5d:
16:5a:d5:75:5f:c9:de:26:fe:6b:42:b5:aa:c4:82:16:5a:bb:
6f:60:84:c9:3e:67:0b:65:da:a3:2f:c0:ce:da:41:4c:83:9a:
71:63:29:b6:ab:1b:74:66:f0:2d:a2:22:ce:09:68:f4:85:bb:
63:21:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:35:13 2025 by rpki-client