Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a8ae914-c4da-3d02-a2a6-1e2466d5a0e4.roa
File: 0a8ae914-c4da-3d02-a2a6-1e2466d5a0e4.roa (raw, json)
Hash identifier: PyUMJ6o5y/rZHypDiINjbnDuiU6/cPIIANqHpL8CLA4=
Subject key identifier: A0:61:94:40:B5:70:B0:64:54:65:FD:C6:CD:CA:9F:04:42:93:ED:91
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A10BB80385D62E3EA22480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a8ae914-c4da-3d02-a2a6-1e2466d5a0e4.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.243.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:0b:b8:03:85:d6:2e:3e:a2:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3ec6dac2-553b-4382-91c7-336c3fa1f5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:67:d1:7e:a8:7f:c2:99:c6:69:38:a8:94:
53:02:1a:00:26:d2:ff:ec:55:2a:70:de:59:20:11:
53:27:28:f5:98:68:ea:e0:9c:3d:6a:38:ee:87:02:
7d:b6:23:3e:5e:0b:df:20:b6:6e:8a:93:ce:ef:ad:
a9:1b:70:15:38:0d:41:13:8b:55:b6:d8:f6:d3:09:
10:cc:7e:64:99:1a:97:f9:2d:0c:d9:1e:6b:51:72:
63:5a:d3:93:0c:f3:b0:ae:6c:35:5e:ea:08:ca:df:
7c:47:f2:44:7b:dd:d9:76:4f:14:64:85:60:43:d8:
b7:85:20:cc:76:8c:2e:b0:72:fc:95:7c:91:1d:c2:
83:02:6e:a7:56:a5:ea:12:35:c1:f8:88:8e:c2:2d:
54:c1:5e:82:98:bb:c4:6c:f0:5d:68:55:14:0b:f0:
da:6e:b7:4e:29:53:97:aa:b5:22:66:4b:35:5d:c5:
b8:33:ca:3a:d6:cf:ce:85:a5:92:42:14:85:d0:6f:
c3:7e:39:74:cf:43:28:1a:ff:56:08:c0:11:71:48:
05:dc:b8:76:2e:a5:21:eb:a0:52:1a:3b:4a:db:d8:
a3:99:bd:4e:ac:8e:e0:30:e9:bf:5b:38:a0:f1:9d:
e7:95:d1:02:e8:bd:3f:de:65:a2:99:ce:50:90:f9:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:94:40:B5:70:B0:64:54:65:FD:C6:CD:CA:9F:04:42:93:ED:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a8ae914-c4da-3d02-a2a6-1e2466d5a0e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:e2:44:fa:eb:4c:e5:66:d3:35:e5:f8:92:6a:7b:a0:dc:bf:
75:f3:57:99:68:8c:c5:97:c0:9a:06:60:60:97:7b:7d:fc:5f:
fb:1a:21:bb:6d:2a:45:ac:9a:c3:dd:e0:88:3f:1f:95:03:1a:
3c:a4:11:32:56:c5:b5:29:7e:30:4e:33:c0:23:fe:02:22:e1:
6d:5b:0f:82:b3:30:7b:44:76:b3:73:e3:8b:92:c4:86:e5:cd:
c1:22:63:72:50:ee:04:8a:39:7b:73:4d:e2:08:c5:7a:a3:94:
92:33:9f:f2:a8:ba:c4:46:49:6f:76:5d:2b:b6:5d:bc:5d:92:
ab:04:68:e8:db:a2:06:38:db:1b:9c:ad:08:5b:83:2b:04:14:
52:72:5f:1b:8b:06:68:d7:4e:43:dc:7f:df:75:67:19:48:0e:
1d:d7:15:62:85:24:44:9f:01:8f:20:b1:82:6a:db:d3:2f:1e:
6c:d5:8b:b5:d5:92:66:60:8f:f0:16:27:93:38:58:f5:26:ca:
b8:61:66:8c:5c:0a:0a:6b:f2:3f:ec:2a:98:c4:ba:62:cb:b9:
7b:57:ab:ad:61:63:88:66:4f:55:32:90:16:d0:68:af:d0:09:
d1:b0:8d:c2:75:43:c8:ef:64:4e:5b:14:c6:f1:b6:fd:79:9c:
f3:2a:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:14:12 2025 by rpki-client