Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8fbacb0-05f5-31c7-b5bf-79e66bcf9371.roa
File: f8fbacb0-05f5-31c7-b5bf-79e66bcf9371.roa (raw, json)
Hash identifier: WNeutlj0pExcwLLg+7eoHpGs69Q8earu7KrVW4J1QhE=
Subject key identifier: C8:85:0D:47:4D:97:85:81:EF:DF:FF:6D:7E:54:FA:0B:22:7A:D2:5D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A568EC20520247DF19BA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8fbacb0-05f5-31c7-b5bf-79e66bcf9371.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.197.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:56:8e:c2:05:20:24:7d:f1:9b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=36339be5-5e88-496e-95ab-0f945d369f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:89:d0:92:38:bc:94:72:a0:20:b8:59:c7:f2:
e3:90:5a:f5:e5:56:4f:d9:87:3d:44:3b:64:c7:0e:
b5:5d:a6:9e:3a:6b:4b:59:f4:47:43:ba:fc:8c:aa:
8a:09:d3:1b:7f:17:61:35:de:4f:0b:d4:bb:82:de:
4f:cb:22:30:d0:d6:5f:2a:d3:f3:82:f5:82:81:95:
c7:ba:96:a2:c3:04:e8:46:cb:ac:c9:91:52:2e:08:
ee:ed:87:0a:a4:5c:c2:dc:9b:38:32:09:09:c8:ba:
9c:d3:e4:74:14:f3:4f:67:0f:c0:ab:0d:ec:42:7f:
25:ae:f7:2e:fb:b5:b8:af:a1:97:fe:0e:07:b5:57:
4e:9e:95:ef:ee:d4:8b:2e:e7:2e:92:c6:80:88:19:
ca:e4:66:9e:02:cf:38:9e:3f:f8:ce:e0:85:79:52:
84:da:1b:06:f8:a0:a6:2a:a7:e3:c5:ad:4d:ac:98:
1b:4e:fc:69:f8:8e:cd:fe:5a:67:14:24:ed:34:f7:
80:1c:a4:46:4f:c3:57:c8:50:84:9c:a1:34:a9:1e:
8f:e5:e1:6c:96:f7:2c:37:7a:2e:69:39:a6:9d:fd:
5d:cd:a2:06:47:99:b8:87:27:5d:07:00:b3:09:85:
c2:cd:2d:69:b7:43:a7:56:6e:0f:f3:ae:21:28:f9:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:85:0D:47:4D:97:85:81:EF:DF:FF:6D:7E:54:FA:0B:22:7A:D2:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8fbacb0-05f5-31c7-b5bf-79e66bcf9371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.197.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:b1:b4:9d:5d:06:78:82:be:8a:e4:46:c1:f2:a4:da:60:22:
ad:f4:26:04:6d:f7:72:2c:91:8e:2a:60:ed:62:af:24:86:4d:
ca:e9:d0:86:a3:10:bf:64:a0:b1:b9:0a:41:d0:cc:de:eb:10:
16:0f:01:8c:fa:8c:2f:44:8c:6a:db:12:69:49:d5:49:7b:76:
01:56:64:60:89:33:e6:ed:aa:c7:23:c1:5d:ba:33:09:85:dd:
9b:00:e2:b9:53:f6:7d:36:7e:3b:94:68:40:81:cc:77:cd:43:
42:1e:24:a8:b5:52:61:72:ae:7a:c5:de:f0:6c:99:a6:e1:08:
23:22:97:02:be:0a:19:de:28:b6:ef:18:de:63:93:13:f1:03:
e0:33:73:ab:17:bc:41:ef:27:6f:fc:3c:15:9e:81:1b:dd:3c:
1a:8a:64:b8:88:ec:6e:89:26:f0:66:9c:9a:20:14:7d:97:9d:
11:42:92:42:e8:6a:32:78:01:3c:e1:58:e8:1f:2f:60:89:22:
cf:ab:ca:2a:2f:cb:fb:e1:2b:02:83:d2:a6:ea:0c:8a:34:00:
b8:26:ed:67:e5:ef:f6:77:1e:02:36:5b:54:71:d3:d3:c0:d6:
db:36:8f:47:94:3a:f8:79:e3:b5:27:53:4f:26:ff:2c:6a:2e:
a0:75:b9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:46:14 2025 by rpki-client