Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faee5502-7dc5-3c5a-b3ed-23063075b4cb.roa
File: faee5502-7dc5-3c5a-b3ed-23063075b4cb.roa (raw, json)
Hash identifier: j68pUsER/U+dKTSorktWYevJjqEmNuYhze8k/GcOFWI=
Subject key identifier: 9E:1D:E4:6B:76:D5:BC:C6:2B:03:82:66:4F:13:9F:44:62:92:FB:D7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1BF791CA75079EE22FB600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faee5502-7dc5-3c5a-b3ed-23063075b4cb.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.238.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:f7:91:ca:75:07:9e:e2:2f:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2880a8ef-5e58-42bb-b03f-93891c78b364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:d5:35:28:8a:d4:1f:64:14:36:0d:3e:97:
49:f9:e5:b3:ea:6b:c5:6e:74:7a:41:70:7d:03:d2:
c1:e4:0a:93:5c:49:1f:13:22:d7:f8:78:f4:8c:b9:
6d:93:27:26:f1:83:5b:1e:45:e6:87:1e:72:38:cb:
60:d3:3e:8c:ef:73:ff:92:76:dc:71:28:b6:79:ef:
a1:3c:63:90:5f:80:6e:d5:14:02:f3:e6:3a:71:12:
b8:4b:32:a9:b7:8b:c9:20:76:a0:ae:80:14:e5:56:
9a:64:fb:1b:5a:26:57:91:ad:82:68:c4:1c:dc:45:
6c:4e:b4:c4:2d:0b:24:7a:3b:62:89:1f:1f:a9:ec:
b2:b7:9a:5a:34:fe:6d:c9:29:70:00:55:9a:2c:74:
10:2d:fe:38:23:5c:68:c8:ab:de:ba:08:ff:6c:1b:
c5:3a:4d:c0:81:d0:f3:3c:b3:fd:5b:a2:05:79:0c:
8f:f4:61:33:f4:3e:9b:9c:42:b1:43:7d:5f:a8:79:
3b:be:22:65:a3:4a:cb:b1:0f:19:5a:eb:c5:20:4e:
b8:2e:ec:89:b3:64:68:60:fb:af:b2:44:90:32:dd:
66:5b:26:4c:0b:b8:d4:32:67:3c:3a:de:ca:22:a8:
18:00:de:b1:b3:a2:4c:49:f5:3d:50:12:cc:7a:ed:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:E4:6B:76:D5:BC:C6:2B:03:82:66:4F:13:9F:44:62:92:FB:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faee5502-7dc5-3c5a-b3ed-23063075b4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:a7:a8:e9:ef:a6:6e:cc:72:94:8e:a0:31:56:6c:55:dc:04:
e0:96:3b:e1:a7:13:63:d3:e9:c2:69:e4:6d:65:4b:9b:8f:dc:
c3:4c:d0:75:8a:d9:89:d2:57:72:92:72:88:8c:f2:00:02:09:
04:be:11:2d:51:57:e3:98:99:8e:83:13:9b:34:79:be:cd:58:
25:8d:07:50:84:8e:55:ed:78:f2:19:4f:50:dd:58:ff:2e:a4:
b8:22:bf:ed:70:97:42:f1:c2:f8:16:81:ff:92:0f:b8:3f:70:
20:41:64:c1:35:58:52:f1:75:eb:58:46:41:8c:81:e9:e1:ad:
5a:f4:f1:65:4e:1e:e0:e0:61:d9:5a:50:79:fb:66:06:4c:91:
89:4d:ea:a6:d3:4f:44:21:59:d6:b0:f2:79:de:dc:a2:c7:4e:
5d:fe:bc:b2:21:47:99:86:2f:b3:19:fd:d2:fd:9a:7d:32:05:
0b:6b:16:05:fc:6e:25:9e:f3:22:5d:6e:e0:64:d2:c6:88:d1:
25:0c:8f:18:92:2a:25:fe:fe:cc:d3:6a:26:aa:91:a6:f4:bc:
0b:80:5a:c7:0a:d6:1f:bd:e1:fe:93:e9:af:0c:09:47:3a:18:
30:ac:94:ef:4d:0a:a3:9d:a5:7b:4a:f4:85:8f:8d:12:d2:55:
af:42:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:30:30 2025 by rpki-client