Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35219449-6bcd-32ea-a761-2bade9f5e9e7.roa
File: 35219449-6bcd-32ea-a761-2bade9f5e9e7.roa (raw, json)
Hash identifier: osN+spXwDCmVI7vddmgS8nzOQUsTGTeL2WZq9ThIsj0=
Subject key identifier: A4:D0:48:49:46:78:F7:CE:02:FD:CE:24:20:49:6A:F3:C6:C3:8E:88
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AC0F209B31340DC0976C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35219449-6bcd-32ea-a761-2bade9f5e9e7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.193.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:0f:20:9b:31:34:0d:c0:97:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a181fb1e-d8fc-4559-b29c-0fd39226ccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bd:f4:58:d6:99:74:82:9e:0f:95:f6:cf:1d:
aa:19:4c:db:05:1e:35:eb:17:13:77:ca:59:e4:bd:
61:f4:d4:74:13:94:03:63:b3:89:da:0d:51:a9:0e:
be:b0:e7:b9:ef:e9:be:ba:c9:54:38:b3:9f:46:52:
ec:dd:cd:18:1f:89:b4:f1:cf:c7:85:89:7f:d6:82:
34:2f:1b:81:46:eb:45:f2:e4:f6:18:c5:95:8a:81:
40:73:9c:0a:84:17:3e:cb:a9:c6:06:a7:3e:52:c1:
5e:b7:62:10:eb:28:74:7e:f7:41:c6:09:e5:e0:43:
bd:cc:72:c6:05:30:e4:f3:fb:db:3a:14:d0:6b:28:
5f:66:f3:45:c0:fa:bd:5d:e5:6c:a2:86:29:37:28:
4a:22:27:62:0c:02:05:b9:76:1c:60:4d:35:ee:be:
f9:f4:bd:66:63:57:b8:92:1e:9a:d2:95:f8:82:75:
8c:27:7e:47:68:4e:0b:34:c4:21:50:e8:65:61:c6:
bb:0f:08:9a:ae:12:ee:63:49:aa:83:1d:e4:1b:d4:
a1:28:98:0a:0a:0c:0e:67:bc:d7:a5:98:6f:0c:30:
54:8b:cb:5e:d7:5f:37:a1:25:82:57:da:77:6c:90:
e1:5c:27:62:8e:d7:22:4a:a2:97:70:25:ec:1d:33:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D0:48:49:46:78:F7:CE:02:FD:CE:24:20:49:6A:F3:C6:C3:8E:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35219449-6bcd-32ea-a761-2bade9f5e9e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.193.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:e6:24:a6:13:02:fa:85:54:1b:7d:63:64:60:8b:82:9b:7c:
c5:ea:44:40:6f:0c:53:11:b4:ea:01:b3:0b:b4:1c:bf:f2:3d:
70:32:a1:6f:86:1c:2b:fb:f8:47:f8:9f:11:da:fc:98:d4:39:
c1:b7:2f:f1:cc:55:f5:d6:99:48:01:92:ba:0e:60:1b:01:63:
b9:5e:f8:79:e1:9e:89:32:1d:79:12:f6:8d:e6:fe:4e:00:43:
91:b6:d5:87:8a:4a:42:8d:0e:bc:6b:ed:dd:d9:fb:37:2f:26:
a0:8b:67:b6:4f:4d:f5:32:3a:6e:4e:8a:65:8c:ec:1f:63:57:
87:65:42:21:f9:17:b4:4b:f1:b0:a6:02:5a:17:30:13:70:44:
e9:bc:78:87:f4:f1:75:e2:8d:1a:5b:f3:89:1e:6e:be:d7:22:
75:0a:3a:a0:6d:5b:02:5c:74:c8:82:3c:b1:c6:f7:46:a9:9f:
92:78:af:0a:2f:6c:77:ab:76:80:0b:4d:ad:f7:c9:e2:6a:d1:
f6:05:d4:12:c7:df:49:ee:8f:d7:39:2f:5d:75:e7:e8:9a:3f:
2f:7c:23:25:04:f9:02:68:d8:0c:9a:5a:86:45:76:91:09:32:
b4:17:38:d1:8d:7b:e8:f4:e6:4c:33:7b:6a:3d:61:57:53:27:
4a:33:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:02:12 2025 by rpki-client