Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb667468-0920-378c-9f36-3db95e7d60db.roa
File: fb667468-0920-378c-9f36-3db95e7d60db.roa (raw, json)
Hash identifier: dOU0MhME9lSio0E+CUKD2PzH5Cpl84p7jCDIJC3KF2c=
Subject key identifier: 5B:9A:FD:50:8D:D0:6B:EA:34:66:86:BF:DF:8C:61:C2:48:36:1D:43
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F681766CD68C1C76C15180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb667468-0920-378c-9f36-3db95e7d60db.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.228.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:81:76:6c:d6:8c:1c:76:c1:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=83d2c033-4b3a-40d8-b60e-0a250b3abe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:6b:be:03:8e:25:fc:24:9e:2d:a1:29:1d:
7e:af:bd:96:1b:87:b8:be:31:c1:63:17:e5:0a:3c:
af:b9:99:8e:39:e4:60:49:3e:24:fd:f2:13:66:be:
03:04:4d:84:9f:2b:ff:03:78:2d:dc:cd:1d:34:fb:
77:1f:4f:27:bc:85:19:36:3e:49:e9:2b:1b:89:83:
e0:c3:2c:28:f8:3c:bc:a5:36:53:f6:65:35:c5:72:
06:e6:04:82:93:55:bb:ce:bf:cb:9f:ea:51:b3:6d:
e6:d4:80:7b:ab:0f:9f:6b:53:c0:ba:e2:ac:23:69:
3b:c7:9c:1e:19:2c:e3:09:31:e9:f3:df:fb:d6:df:
ff:63:81:a8:25:a9:26:45:24:24:2e:28:8b:1f:36:
e8:0f:b0:77:72:9d:38:6c:dc:a8:59:ff:16:0c:3c:
af:14:98:b9:44:b8:d7:cc:8d:7d:0e:1f:03:68:92:
be:e4:3d:fd:82:1d:34:96:ed:a3:ff:d5:0b:4b:80:
9b:b4:32:11:d7:74:d6:c4:fe:e8:7c:8d:85:fc:72:
c9:6b:cf:73:57:a2:9c:d4:81:23:83:07:cb:90:32:
41:6e:31:e8:cc:70:18:93:3a:03:a2:12:90:1e:63:
63:38:cb:76:0a:8c:15:0d:c1:35:70:5d:b9:f4:4f:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:FD:50:8D:D0:6B:EA:34:66:86:BF:DF:8C:61:C2:48:36:1D:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb667468-0920-378c-9f36-3db95e7d60db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.228.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:cb:fa:45:73:d7:21:ea:2f:17:5d:56:b5:74:a1:da:f4:6a:
e5:d6:8e:b5:54:e7:94:8b:d8:07:96:cf:12:c6:85:99:73:bf:
f6:96:28:b7:2b:0a:65:2e:7a:27:2a:0b:15:f8:89:c6:11:5a:
a1:9f:fc:96:a6:ca:5d:0e:f4:50:cd:02:d3:cd:31:1e:ff:33:
fc:cf:42:ef:b1:af:9e:8a:4c:d4:cd:af:21:ff:00:0c:14:37:
fe:40:73:f9:6b:ac:34:d7:11:e8:56:c9:6d:a9:f0:c3:89:5e:
f7:29:f7:7b:b9:06:a2:d2:ba:5e:ca:8e:15:c8:b8:b3:89:d7:
cd:12:95:c6:9f:85:a1:8a:f8:59:d0:d0:f9:b8:3d:91:9d:46:
2b:e5:1f:22:bb:a6:a3:7a:18:4f:7a:aa:83:fb:9c:6f:59:bf:
76:56:87:4e:53:aa:5e:a9:8c:57:12:50:c5:65:45:da:7e:53:
0e:5e:9c:2c:9b:c3:60:72:78:8a:81:75:36:65:57:8b:f2:93:
7f:27:55:96:04:ef:8c:c5:cd:b3:a8:ad:1c:84:70:2c:2e:6a:
6e:c5:df:f2:33:22:37:6a:b2:ea:e9:45:d0:76:d4:3a:c0:0a:
cb:86:00:9c:e3:59:75:6f:f1:31:1b:f3:78:11:c0:f6:1a:27:
13:de:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:53:52 2025 by rpki-client