Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21d7d3dc-0b29-357e-b2d4-c6252a9648cc.roa
File: 21d7d3dc-0b29-357e-b2d4-c6252a9648cc.roa (raw, json)
Hash identifier: fQu6nspxo5CfzrQtkwdhDlMPuACPbe3JrkKG3fthvEo=
Subject key identifier: EC:6A:7E:68:9E:C5:E3:D9:10:6D:21:F1:9D:9A:E5:B2:BA:39:18:47
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B065C02E39382597AD60FE20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21d7d3dc-0b29-357e-b2d4-c6252a9648cc.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.192.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:c0:2e:39:38:25:97:ad:60:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=832164de-9f32-4b9a-8bb7-44847496e307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:cf:b7:8c:e7:8b:a0:f3:47:53:55:fa:15:
ce:9f:c7:fe:e5:d4:69:88:8a:38:8e:6b:20:fc:0c:
56:4c:bc:54:e5:6e:44:8d:99:1b:49:18:f7:f4:fb:
25:3f:e8:67:d9:ca:59:74:66:14:f2:8f:0b:14:56:
72:06:b6:a1:cd:b0:5c:1e:15:13:16:50:c7:07:17:
fe:fa:ed:5f:2d:49:30:61:b1:d4:80:a1:b5:db:ac:
2b:a8:46:bb:e0:f7:d4:99:04:e0:3f:22:0e:29:0b:
87:73:51:ba:8e:f7:60:88:76:90:37:f1:62:b3:24:
2b:7e:a0:4b:8f:fd:ce:8c:96:ed:20:37:ea:e1:61:
91:f1:eb:91:d0:9c:b7:a7:ea:ba:ca:d5:be:00:42:
4f:37:ce:9e:a9:3b:2e:ba:41:e6:de:cf:33:34:dd:
3a:a4:0b:4f:c0:45:8f:54:6a:57:ac:b2:af:bf:c0:
07:bf:af:09:86:58:e8:28:55:17:7c:07:55:99:a3:
c4:30:8c:10:22:82:cc:54:b8:f1:67:f7:0b:92:7a:
64:5b:eb:79:f0:51:80:dd:e6:72:cb:e5:fc:90:75:
21:f7:e1:43:c1:04:1b:d5:be:e5:ee:eb:80:79:99:
02:f2:e8:c3:22:50:b7:d0:56:85:c6:1a:55:b4:28:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6A:7E:68:9E:C5:E3:D9:10:6D:21:F1:9D:9A:E5:B2:BA:39:18:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21d7d3dc-0b29-357e-b2d4-c6252a9648cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.192.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:0f:8f:28:1d:06:77:c2:21:17:bb:5f:08:7c:4b:ed:f7:8c:
8b:e3:da:3a:b5:cb:44:8c:1f:ca:62:98:a9:d5:cc:ff:08:c6:
56:54:11:fe:9a:25:f0:b1:95:9c:98:40:f9:87:38:a1:a1:34:
8f:a8:29:21:4c:ca:b8:84:13:83:8c:4f:48:37:08:b4:3d:0d:
1e:c3:93:32:87:77:98:06:52:a3:19:93:3d:e1:53:13:7f:29:
69:3f:62:9f:09:6e:91:ea:0c:ae:a8:d7:42:57:33:17:4a:5d:
4a:78:c6:08:39:73:50:6b:96:8a:44:73:74:2c:24:72:70:4b:
2d:ce:0e:93:f2:ca:ce:c9:0c:22:29:88:6b:25:23:aa:30:82:
3e:70:0f:90:fa:aa:8f:25:0b:47:30:16:d1:c3:aa:d3:12:f1:
90:74:30:f2:e6:9b:28:e9:65:ba:3f:d9:6d:47:2c:d8:7d:0b:
c0:c8:d5:0f:ca:fa:0f:5b:07:7e:92:9d:c0:2a:4e:5f:d4:57:
61:a7:a5:0d:0f:46:92:10:91:f4:80:cc:95:c5:3d:b8:33:9b:
81:06:87:bc:3d:c8:fa:27:50:51:b6:6d:8e:9e:f6:9a:be:c7:
98:b6:6d:63:d7:f6:70:58:8f:eb:39:a7:73:0a:c7:27:64:53:
e1:1b:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:58:56 2025 by rpki-client