Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/278e976b-bd2b-308b-b7e8-55279c69a426.roa
File: 278e976b-bd2b-308b-b7e8-55279c69a426.roa (raw, json)
Hash identifier: cf4Yy0bHFwuU+W5BW2kbCm+E8Ce1t5r9FCTZGz9f6Vc=
Subject key identifier: 83:60:CC:A5:E8:3F:2E:91:CD:CB:65:2D:07:41:0E:1B:D4:73:AA:E4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AD00D145BBC5FF3DC37130
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/278e976b-bd2b-308b-b7e8-55279c69a426.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:00:d1:45:bb:c5:ff:3d:c3:71:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=2f6b301e-445a-4005-ab12-49ad89efa5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:a1:9f:2c:b7:40:06:96:9b:f0:48:60:71:
3d:3e:8d:56:e9:c7:5c:60:e8:0d:03:48:32:f0:28:
46:b8:74:0c:23:fd:3a:34:90:21:e8:87:85:70:09:
c6:73:5e:6d:3f:89:d7:e1:ac:c5:68:ab:f4:21:60:
2f:d6:16:e6:3b:f8:f9:ce:86:e9:95:a7:61:31:c9:
92:64:a0:0b:7b:c6:69:ee:6a:49:2e:00:88:01:a6:
78:3e:c0:55:4d:42:05:31:84:76:56:03:5a:3d:60:
ef:15:96:cd:62:85:0b:b3:35:69:68:48:1d:a1:9b:
d6:0d:e6:e0:8f:ac:77:10:22:10:79:74:48:b1:4a:
2b:99:c5:54:51:61:38:cf:d4:22:75:88:a8:d1:e2:
06:16:e2:dd:27:79:1d:1f:cd:22:c9:10:e1:6a:7c:
50:66:ff:b3:10:15:49:10:d6:ee:26:30:99:30:64:
3d:25:f3:3c:59:a3:bf:88:42:3e:9b:0c:9f:1c:03:
cf:e8:af:10:8a:2d:3c:ba:f5:e8:81:46:ef:43:02:
4c:d8:d6:7e:af:35:fd:2f:58:e6:c5:56:e3:68:bf:
bf:7e:19:7d:0c:d9:8d:7a:3d:2d:08:97:1b:74:87:
f0:13:fd:80:2a:db:25:97:f7:af:a1:d6:b8:b3:9a:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:60:CC:A5:E8:3F:2E:91:CD:CB:65:2D:07:41:0E:1B:D4:73:AA:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/278e976b-bd2b-308b-b7e8-55279c69a426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:be:21:a5:ff:9b:47:67:07:a5:b3:50:46:9d:b5:dc:63:6e:
a5:cd:70:f4:2f:86:ca:c8:9f:28:ac:79:d1:ce:9b:32:54:a4:
11:10:a0:b6:d7:78:50:d9:ae:ad:ce:94:d9:b4:63:53:9a:1f:
5e:06:70:af:5e:61:ea:8e:0c:eb:f3:51:24:f4:49:c3:e1:26:
29:16:ce:56:86:cb:1e:39:d5:8d:fa:70:d7:c8:94:af:c0:a0:
8a:bb:38:3f:71:17:b5:4d:31:7f:b3:fa:46:66:54:5c:dc:f7:
59:c6:3b:91:e5:fa:23:37:05:d4:c7:2a:8e:da:df:c1:91:0d:
de:79:43:8b:2b:32:ab:e4:d1:1f:77:e2:2f:b6:b5:31:c4:60:
f7:78:03:00:95:c8:0a:a5:03:98:b6:7f:d8:59:27:68:ea:81:
c3:63:31:80:a8:1e:59:9b:fa:71:55:de:be:90:cb:ee:05:56:
93:2f:0a:3f:e4:48:b6:b2:3d:42:58:d6:b4:0f:bc:a7:54:63:
8f:71:6d:c4:0b:1b:7c:c5:68:3c:4f:c1:ca:09:95:b5:33:c9:
e4:5d:d4:fb:8d:eb:2c:e5:83:3f:71:85:f6:c2:98:21:63:6e:
d8:4a:84:8e:01:30:d9:06:6c:00:88:d8:a0:a1:49:ff:54:01:
46:fa:7b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:37:17 2025 by rpki-client