Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12a30cd1-cb5e-3eab-a4bd-dad0db9fae38.roa
File: 12a30cd1-cb5e-3eab-a4bd-dad0db9fae38.roa (raw, json)
Hash identifier: aCS3ZCbWaGM7RV0iZnxcBiIzGyBzAZ9T5tpq6VRnxOE=
Subject key identifier: EC:AE:91:3B:57:60:E8:19:55:F3:A9:FD:E8:2B:EE:29:34:9E:03:B5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B42E538DF170FAC1AA0980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12a30cd1-cb5e-3eab-a4bd-dad0db9fae38.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.204.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:2e:53:8d:f1:70:fa:c1:aa:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d9d66b6f-43ef-47a3-a5ec-cba46eb331e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:0b:5b:be:0e:29:4c:08:4f:91:56:40:9e:
92:c0:3f:de:99:2a:2b:98:7d:86:e2:b5:53:a8:36:
3d:5a:a1:18:4c:20:1c:7c:b8:4c:ce:5f:a8:9f:1a:
2a:2a:62:17:c7:0c:9c:cb:8c:f5:fa:7f:a9:ea:59:
a3:a6:0a:9e:20:f9:c6:e0:43:b9:9c:7a:9d:ef:f7:
ed:eb:54:1c:cb:13:45:a2:1e:ad:f6:47:42:a8:ed:
47:01:7a:35:dd:41:7e:1d:8b:b0:86:fc:d7:52:f1:
5b:d6:38:d2:d5:1a:4f:2c:c2:e5:1b:cb:f0:8f:3f:
61:1a:79:6d:f4:ce:cc:32:f5:3e:91:39:8b:7c:2d:
b5:29:f1:41:88:41:d0:09:8c:31:71:22:ca:9d:9e:
f2:96:33:57:10:9b:da:1d:40:d6:5e:07:29:d8:e7:
fd:77:75:bb:9a:1b:44:94:52:90:f6:21:1d:29:0d:
cc:0d:b2:76:7d:ff:db:b5:16:22:4d:4d:e9:20:2c:
7e:cc:22:fe:e4:29:72:6a:e4:51:2c:fb:8a:56:94:
ee:1c:f4:86:81:05:92:f3:11:69:81:c1:87:cd:46:
3c:48:c9:0d:c8:85:71:21:20:0f:ac:e3:39:b0:f9:
46:31:bb:92:a8:c0:bf:94:59:35:ee:ef:d6:56:a2:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AE:91:3B:57:60:E8:19:55:F3:A9:FD:E8:2B:EE:29:34:9E:03:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12a30cd1-cb5e-3eab-a4bd-dad0db9fae38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:08:8a:d1:c3:b5:eb:f5:d2:b5:c8:3c:78:5c:01:9a:06:d4:
46:30:c5:30:69:89:45:6e:74:13:67:60:49:c0:2d:b1:da:70:
f6:b6:4f:7a:94:c9:4c:cb:8e:2e:bd:1b:9b:22:22:f1:32:d4:
3a:38:c6:76:a8:62:0b:14:81:2b:24:ea:3b:92:60:f5:87:49:
12:d8:9b:ff:b5:54:91:77:f6:25:ae:d5:8e:af:0a:ad:2c:6c:
34:69:3c:fc:d7:e4:10:46:9b:49:0d:87:ba:e3:62:f3:3c:d6:
5c:81:7e:3e:f5:59:2e:5f:9c:a6:45:f0:35:10:96:39:b6:56:
22:a3:ef:5c:cd:3d:f8:ad:e6:b3:9c:38:e4:a7:d6:e2:d0:84:
c6:ba:6b:c0:c1:7e:2e:11:44:7e:07:c6:28:d2:ae:b2:f7:e6:
d1:91:ed:66:67:e7:50:f5:29:9f:4c:c6:1f:9b:d9:9d:51:4b:
ff:76:ec:40:79:55:c7:fd:fa:cf:dc:22:ad:2d:15:ab:ef:fb:
f9:a1:21:76:cb:8d:f1:b4:0b:1e:1b:fe:0b:b1:ba:c5:2d:72:
91:c5:d9:19:53:e6:0c:b4:c3:5e:11:af:b5:08:fd:bf:7c:24:
41:bc:64:2d:c6:9f:da:da:29:7f:7d:c2:29:34:98:95:86:ce:
6d:f5:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:35:42 2025 by rpki-client