Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d594451-a22a-3a4c-ab66-19edacf0f133.roa
File: 2d594451-a22a-3a4c-ab66-19edacf0f133.roa (raw, json)
Hash identifier: TZGypA9AGlF8dEL9Vzmwtle9b5NDDoqvUlZ7UYWD1rM=
Subject key identifier: 85:D8:A5:93:BA:34:B9:0B:49:55:E8:34:86:D2:3C:F5:C7:99:4B:09
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A16798756DEBD710C8015A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d594451-a22a-3a4c-ab66-19edacf0f133.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:79:87:56:de:bd:71:0c:80:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0f4895d4-7e3e-428e-b406-82cacdc271fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:da:ac:bb:56:54:84:35:e4:a8:22:54:cb:be:
58:cd:3d:39:7a:22:86:eb:b5:18:ff:00:a9:86:9f:
58:68:5d:62:71:65:6b:5f:61:b5:2a:a9:00:d9:c9:
80:47:30:33:2a:ca:97:83:6b:f9:d4:b1:20:bd:cc:
3b:39:9c:88:1d:ba:5f:c6:3a:85:d4:b7:20:83:f1:
89:12:27:1c:3f:ff:61:87:44:e3:b9:13:ae:bb:0b:
c4:cd:2b:5f:06:23:d7:d4:76:5e:8e:a9:ba:2a:6d:
24:a7:05:5e:f7:08:45:74:8a:f7:5f:0f:4d:45:c7:
bc:4a:35:a6:b7:40:06:a2:53:8e:1b:97:9c:be:c0:
4d:b7:9d:b0:7d:b3:c7:48:e7:47:20:93:ad:95:a0:
ee:2d:2c:ad:41:92:f1:01:24:9f:8c:40:f8:7f:a7:
b6:1c:f9:a0:a8:79:05:12:65:85:b2:c6:78:67:92:
55:7e:b5:44:a1:59:94:bf:eb:b8:f7:aa:f7:33:fd:
ea:8f:67:8b:bf:02:5a:92:99:2b:99:3a:91:80:e3:
89:94:34:37:49:a7:8c:8d:ca:75:79:02:1d:ed:19:
2d:da:46:ab:ae:d7:64:6f:c7:a7:2c:0a:50:31:05:
96:48:33:ef:b1:8f:94:33:b5:14:5f:b7:37:0f:b9:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:A5:93:BA:34:B9:0B:49:55:E8:34:86:D2:3C:F5:C7:99:4B:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d594451-a22a-3a4c-ab66-19edacf0f133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:5e:ee:f3:ef:d1:9e:73:1e:91:4e:78:75:8c:67:d2:16:f4:
2a:1c:5b:29:34:f1:31:4a:e3:c6:4c:d5:08:e0:22:ad:86:f3:
e8:7b:47:18:72:b9:96:77:54:f2:06:b0:67:6e:c4:31:80:c0:
bb:9d:16:a6:4d:a9:33:b4:9b:f2:6a:66:0a:bf:35:1b:41:0d:
f2:67:95:41:ff:c4:cb:4b:64:42:32:26:8b:5c:d9:bd:38:65:
55:43:37:75:ee:ea:82:4b:21:53:ca:61:52:8a:14:c9:ba:5b:
70:cc:d2:47:7d:d5:e9:1d:dd:42:68:15:70:47:02:3c:71:22:
ef:65:df:ab:f8:88:da:e2:52:bb:78:01:0f:22:18:4d:8c:ef:
d4:bb:a7:4f:05:7f:5d:35:4e:7e:c2:73:34:0c:d7:a3:08:86:
f2:16:fd:2e:04:a8:f0:46:02:16:77:69:61:c6:2d:83:8f:2c:
7a:e5:1a:e8:bc:96:07:16:26:0a:80:4e:d7:c4:0e:fe:6e:21:
e8:7a:6b:f4:52:27:46:86:d9:73:4b:41:44:d2:5c:e6:13:43:
8e:0e:9d:39:27:a3:42:b0:b0:74:95:1d:ce:6d:4f:70:d2:b0:
75:f3:b0:c9:d4:44:d3:d7:72:97:97:10:7c:20:db:f8:db:33:
3a:61:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:36 2025 by rpki-client