Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0cf31675-fe95-30db-8f3b-d93db10bab85.roa
File: 0cf31675-fe95-30db-8f3b-d93db10bab85.roa (raw, json)
Hash identifier: QTFwydjICY6q4bqOtHnzXYRL4FQdcf4Z5w7frvqtIeI=
Subject key identifier: 93:2C:4F:FE:C8:2D:B0:3C:B6:F8:7F:01:69:56:0B:D2:68:EB:97:17
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BDE828939441A3BC53E6C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0cf31675-fe95-30db-8f3b-d93db10bab85.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.198.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:e8:28:93:94:41:a3:bc:53:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=0dd4f2f0-30b6-428f-bcbe-3119b98556d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:12:af:a6:19:5a:fc:a3:72:b0:ac:9f:ba:
2f:c1:59:a8:7b:f7:d0:88:fc:b9:cf:f9:c6:c6:09:
05:7c:0d:01:32:82:5f:25:02:b0:fc:bc:d0:ee:50:
e7:d7:1f:4f:d6:4d:7a:aa:3a:8e:62:79:af:a9:70:
c3:ca:aa:33:2f:ac:d7:c9:24:93:17:3a:ad:21:85:
d7:e6:67:39:3e:0f:cc:a7:bc:17:c4:a7:b0:c3:76:
68:08:1b:69:a0:d8:d5:32:08:94:d1:91:83:6d:92:
55:58:de:72:d3:9e:c5:11:78:ae:e4:cd:f0:b1:23:
c0:c6:96:4c:f7:9c:3e:90:f8:0b:06:c7:2c:a7:29:
d3:b6:82:7a:f1:8a:27:9d:8b:dd:42:c2:02:10:1f:
3c:15:4d:61:e7:d4:eb:1c:de:24:9c:fa:51:6b:ae:
68:3f:8d:90:cc:bf:8c:69:96:58:8c:d3:ec:5a:09:
22:e9:b5:b9:90:75:0c:ee:c1:71:49:a4:71:85:34:
48:a3:4f:96:97:35:9c:08:3c:fe:dc:f6:15:97:96:
e0:8f:dc:06:da:da:cf:20:49:ec:78:54:4c:bb:20:
6f:ca:86:66:05:5f:06:0b:2f:84:65:b8:e5:a5:f1:
15:b9:39:45:27:fd:0f:9f:f5:d1:04:75:d5:94:02:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:4F:FE:C8:2D:B0:3C:B6:F8:7F:01:69:56:0B:D2:68:EB:97:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0cf31675-fe95-30db-8f3b-d93db10bab85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.198.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:83:bf:06:4d:a9:c3:d4:c7:57:a0:c0:9f:64:de:aa:0c:e1:
db:d3:83:68:14:99:f3:36:9f:3b:5b:0b:ac:3f:54:32:c4:92:
46:8c:e7:5e:31:ba:14:16:13:50:73:c1:8c:14:9d:45:92:59:
64:db:8d:49:ef:4e:09:d1:67:05:48:50:a2:ad:66:41:4f:1a:
16:ea:9a:c1:72:e0:df:9d:51:1c:1d:0a:bc:39:b9:56:ac:c5:
c8:e7:9b:41:2c:e5:56:d2:39:1c:0d:4f:9d:8d:98:15:20:c6:
0d:69:59:c0:be:11:06:b4:e7:1d:6e:4a:98:9f:b6:39:f8:11:
5a:9e:4b:ac:db:ae:f2:dc:0b:f5:28:f8:1b:10:f2:75:a3:fc:
48:69:2c:00:3e:a0:f5:87:8d:3a:78:99:12:4f:f3:a5:56:97:
a7:a2:e8:e0:c8:b1:3e:3b:b9:c3:fc:ae:45:2f:bb:11:fa:f3:
ad:f7:c2:fa:65:c6:a6:b1:30:23:30:dd:88:ec:e9:44:65:3e:
8c:15:05:fc:68:b6:40:ff:d0:55:d0:51:ae:52:c7:b1:77:ab:
b3:bc:d7:b2:b0:7e:0c:62:c3:e7:8d:09:a2:3a:ec:b0:3f:fc:
40:aa:a8:05:5c:77:73:f9:99:1f:32:92:f6:6f:7c:af:88:33:
fc:42:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:16 2025 by rpki-client