Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b24c3b0-839d-3ffc-b599-afb62c637802.roa
File: 0b24c3b0-839d-3ffc-b599-afb62c637802.roa (raw, json)
Hash identifier: 0nWcZ4uVCFq4nm+YruMGmG4m9r6WOW13pHINSc6PuLA=
Subject key identifier: 1A:0A:52:FE:94:A4:3E:2D:7F:AE:45:34:22:3F:37:7E:34:71:3F:C2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A21107D4C93F31979BF480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b24c3b0-839d-3ffc-b599-afb62c637802.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.243.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a2:11:07:d4:c9:3f:31:97:9b:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=ff0f522b-02e6-4c70-811f-fbe6d229f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:14:9c:d8:72:15:73:aa:19:bd:f5:7e:12:
32:1b:0a:4c:44:be:f9:8b:04:78:7c:5c:c4:ac:d4:
f6:9b:dd:60:ea:e3:13:68:23:9b:f3:b6:24:63:bd:
42:ee:01:a7:f8:13:bd:dd:d8:99:62:6d:a5:cb:19:
29:dd:1b:80:76:94:5b:2f:46:b8:fe:a7:fd:67:92:
7a:50:e1:25:b5:b3:70:8b:13:a5:19:d1:fd:da:72:
77:fd:51:f5:b6:a3:79:56:b6:26:41:b7:fc:63:93:
c3:98:17:b6:8d:cd:f7:f3:f2:00:fe:b6:e9:21:a5:
a5:6b:1a:b3:4f:f9:d8:9a:14:8c:bc:fb:b3:32:18:
41:f6:92:1e:8b:fc:c8:67:28:5c:9f:78:d2:5e:c8:
9c:b1:a3:d5:84:71:51:a0:ee:9a:50:c6:ba:1c:ab:
c2:65:6b:53:37:c8:a5:d1:d9:f3:ef:b7:03:53:27:
71:5f:66:42:6f:5c:0a:4b:4e:0e:aa:75:a7:7b:13:
af:dc:64:86:e0:50:4f:f9:06:f1:cc:d7:9c:9d:67:
e8:7d:f3:c5:10:ab:a6:22:e1:c4:d9:8d:90:90:01:
66:fe:88:5b:c9:97:28:ba:62:7e:f5:c3:3d:e6:cf:
3d:a6:18:0d:26:d4:89:83:d3:92:97:20:b6:f9:a1:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0A:52:FE:94:A4:3E:2D:7F:AE:45:34:22:3F:37:7E:34:71:3F:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b24c3b0-839d-3ffc-b599-afb62c637802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:1c:32:6b:44:31:a4:ae:27:ba:42:6d:c4:f9:85:25:f5:9c:
5d:6b:4e:f3:d5:43:2d:2d:f8:37:0e:c0:02:54:7e:a6:1b:cc:
c6:c8:88:3e:c8:3d:32:67:a0:97:46:25:fe:98:3c:ff:0b:cd:
27:b3:4c:1c:3a:2c:b3:18:44:8e:2a:f3:86:f9:c0:ed:fa:f9:
0b:bf:b8:53:b2:2d:d2:01:df:be:86:f2:bf:a4:e1:73:49:81:
b6:cc:dd:f5:ac:62:d9:71:1c:16:fe:b3:a6:97:4c:04:a6:2c:
0f:a6:ad:fd:b3:a1:68:80:8a:cf:d4:83:82:6d:91:d6:2d:cd:
7b:08:8b:6e:d7:3d:f8:65:29:75:4e:a9:31:b9:b8:3d:09:75:
69:5b:1e:4b:6e:ff:6f:62:2c:94:8d:8b:0b:9c:97:04:08:d7:
5c:86:23:27:b1:dd:02:ee:82:f4:e0:92:e3:73:74:fa:15:b5:
6a:79:86:00:cb:f8:6a:2b:17:59:34:72:b1:60:e6:ed:bd:3e:
12:1d:1e:0d:cc:63:b4:16:dc:85:7c:57:fa:3a:7a:ef:a7:b5:
be:59:26:18:03:c3:13:2d:c3:2e:18:c2:6e:66:46:2c:c7:2e:
5d:ff:4c:6d:ae:49:9a:d7:67:25:8b:a4:ce:90:fe:6f:c9:b5:
a9:01:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:58:54 2025 by rpki-client