Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0cec24c0-4d54-3762-b7bb-4a5dc13ac62e.roa
File: 0cec24c0-4d54-3762-b7bb-4a5dc13ac62e.roa (raw, json)
Hash identifier: yl4TvZvX+I8DT90eKyeviw+YJJwo3bDa0VZYYIi9kh8=
Subject key identifier: AE:27:7C:33:03:A7:FA:F4:19:2C:F6:3D:1A:B7:F4:E1:48:1F:5D:1C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8D938C29932FF5C22F44400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0cec24c0-4d54-3762-b7bb-4a5dc13ac62e.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.242.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:d9:38:c2:99:32:ff:5c:22:f4:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=7e7083fa-d3cc-4b3e-8d08-5349a73e7778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:91:9a:9f:69:5c:95:45:ed:15:46:95:64:
bc:e1:1e:d9:8c:ba:f1:d4:d6:d9:f9:0b:57:dc:3f:
c0:3d:76:a9:97:73:d3:f3:4b:5c:ed:cf:c5:36:dc:
4b:a3:d1:6e:e0:a2:98:1c:97:be:05:c3:b0:19:fc:
85:8a:82:d0:4d:ff:ac:fb:67:97:8d:57:e7:b2:0b:
23:e1:01:4f:7d:4c:47:ac:32:39:a6:dd:05:d1:45:
56:7f:e3:57:8c:1e:d8:9d:29:98:d0:4f:f7:8a:5c:
f0:17:77:61:f2:c9:1c:0d:c9:65:3c:e6:20:a3:01:
2a:3a:a4:33:2c:24:9d:9b:34:28:4d:d1:b3:b5:cb:
57:bd:78:e5:1b:2f:a6:5a:c0:31:49:b2:52:35:fa:
40:ad:89:76:31:b9:f9:aa:9f:04:ab:c6:06:de:40:
55:29:05:bc:e9:09:bf:ed:38:ea:e4:27:91:b7:21:
5c:7e:43:c7:a0:ce:fa:76:fd:9a:00:5b:16:dc:90:
cf:2d:e8:17:92:57:bc:c7:f8:09:e4:0e:7c:0f:99:
d0:9f:cb:d7:4f:a4:af:81:e8:37:a3:76:d1:77:53:
b5:bc:4b:ee:2b:5d:8d:18:79:36:83:44:4a:09:93:
da:43:8d:1f:31:ef:db:df:aa:68:c1:78:f3:60:d6:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:27:7C:33:03:A7:FA:F4:19:2C:F6:3D:1A:B7:F4:E1:48:1F:5D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0cec24c0-4d54-3762-b7bb-4a5dc13ac62e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.242.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:04:e5:6c:25:9b:2c:a0:d2:bd:63:0d:de:17:4b:f6:1f:cd:
84:1a:0c:43:49:a0:81:bb:f2:d6:58:84:5d:54:23:f4:d6:77:
c0:01:5d:55:90:2f:52:8e:75:e5:1a:4d:3d:3a:88:fe:eb:6c:
af:28:d3:6e:7d:fb:5d:44:7f:0c:f6:a1:4a:bd:33:22:9a:47:
a4:6e:1f:66:3a:cb:a6:6c:31:55:33:c5:9e:22:45:94:42:6a:
f0:94:df:c1:d9:33:b8:c8:64:ca:4f:9d:2a:24:41:9c:f4:55:
30:13:b0:bf:d7:34:d3:65:08:d6:a5:e7:e3:f5:e2:7c:cf:e2:
50:5a:14:4c:8d:81:93:d4:44:cc:f1:21:77:f9:8d:31:6f:92:
b6:12:cb:b8:d8:c5:d5:ca:f3:c4:e2:7e:d9:95:b8:93:68:4b:
7e:3a:fa:63:83:47:8f:06:a8:ac:99:e4:e2:f9:44:05:5c:4a:
9b:5f:34:ef:e3:c3:b8:7d:c2:e2:39:84:f2:9d:6a:23:3b:0f:
53:05:9a:7a:00:56:a0:e6:82:be:94:a8:3a:bd:71:c5:fa:3f:
c8:ac:e8:d9:fc:1d:04:1e:7b:45:68:e2:5a:b7:3a:b9:11:ef:
50:34:56:dd:3f:69:66:05:f9:fc:71:7b:b0:e6:86:92:75:44:
16:8b:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:08:36 2025 by rpki-client