Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35dfa8aa-2dfa-3167-9c75-712daec4f84e.roa
File: 35dfa8aa-2dfa-3167-9c75-712daec4f84e.roa (raw, json)
Hash identifier: dFDb1ZhCEZlKguiN6x9ikqMISGw1OOKqsV6Hw1ymwSY=
Subject key identifier: 40:22:FC:5B:04:88:D8:85:6F:47:7F:C0:56:E1:2A:21:B6:D3:73:75
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0C6DA729AD609D50724F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35dfa8aa-2dfa-3167-9c75-712daec4f84e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:6d:a7:29:ad:60:9d:50:72:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=44e1a872-9320-426c-a442-fc30643a5b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:24:9d:93:a7:80:4c:2d:fc:8c:9b:d0:c4:
c1:e8:a8:3f:cf:7f:93:bd:32:01:8d:30:49:ee:b6:
cf:1c:91:22:2d:e5:20:23:5b:03:1a:2b:05:8b:61:
6a:a0:3c:81:5c:1a:8d:3f:d1:c3:89:b9:1e:e8:b2:
5b:e1:b4:33:48:7b:a0:16:06:f2:dc:48:48:f3:0a:
18:e3:bd:db:70:bc:6d:d3:6a:26:bf:4c:b2:92:84:
58:e4:df:37:b9:67:48:89:be:88:29:ec:1f:ea:e8:
66:4b:44:af:17:35:70:a5:40:90:df:e9:bc:85:9b:
7d:ae:c7:ab:08:90:b3:1c:54:02:4c:d0:9d:6e:2d:
73:21:46:b6:56:25:3a:5a:a6:92:42:8c:4d:5e:20:
56:c2:e0:28:70:e0:49:ac:45:7d:ba:05:fa:cd:1d:
64:50:17:12:5e:d4:ed:a6:70:00:f0:46:11:0a:57:
92:e0:6a:4c:42:82:91:ae:64:5b:d1:08:59:2b:40:
1d:32:87:50:ed:ca:02:d8:b0:ba:2d:07:57:d8:55:
37:42:fc:cf:98:c6:83:fb:64:13:d8:e6:00:95:3e:
73:2b:e9:64:89:68:08:4d:63:26:ac:5e:67:7b:dc:
f1:ed:68:10:77:0d:f8:cc:cc:5a:db:e9:61:ce:4d:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:FC:5B:04:88:D8:85:6F:47:7F:C0:56:E1:2A:21:B6:D3:73:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35dfa8aa-2dfa-3167-9c75-712daec4f84e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:f7:07:7d:72:e9:3c:7c:3a:07:8f:f7:2e:89:b4:23:cd:f9:
6b:3f:cd:8b:1b:2a:26:fc:26:10:64:4c:80:31:48:b8:d7:b9:
db:64:da:45:85:7b:86:7e:90:67:89:40:10:6f:0e:df:3e:52:
35:73:78:de:b1:97:8b:24:11:3d:04:7d:9b:6e:7a:73:df:7d:
6f:07:a4:2f:f9:9f:dc:72:e5:11:b4:9c:20:76:41:0e:ca:b4:
bc:09:08:f8:c2:c7:81:3e:94:c1:fb:34:66:5a:52:04:2e:81:
1b:62:54:e3:10:9e:fa:80:d9:f4:82:44:42:db:d0:eb:aa:e8:
27:dd:2b:d9:b2:a2:75:b2:21:dd:9f:fa:02:f8:48:6d:af:a2:
3f:78:6f:b6:85:41:50:dc:89:ff:d9:ed:1a:bc:35:b3:dd:8d:
9f:4b:03:bf:2a:8d:7c:9e:b9:df:09:c9:f0:50:95:8d:f1:f1:
cd:c4:fe:e0:b2:ff:7a:ff:d2:5d:d7:68:1b:b9:b0:94:89:5d:
7f:1f:01:f9:1e:2f:e3:7c:00:9c:87:b0:2a:e7:a2:a9:33:28:
ca:d4:a3:96:ef:d5:01:3d:0e:63:d4:60:4a:e5:2d:d9:dc:48:
bc:c9:46:71:a9:9b:63:fd:c7:bb:64:9c:98:f8:63:a5:2a:17:
9a:23:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:35:53 2025 by rpki-client