Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/389bb65a-6a76-3313-8cc7-a94f640f6356.roa
File: 389bb65a-6a76-3313-8cc7-a94f640f6356.roa (raw, json)
Hash identifier: e94gkm0tyxcQL4g3IzswOFUnTuAwT76yDKjUVLJRxlM=
Subject key identifier: 5C:D1:3F:9E:E1:04:2B:41:7B:4E:4F:B1:37:9D:19:67:54:5C:89:21
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F5F5B192EEF4DC7D1CED80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/389bb65a-6a76-3313-8cc7-a94f640f6356.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f5:f5:b1:92:ee:f4:dc:7d:1c:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=517bb2e4-bd5d-4665-aaeb-ec7d3f0c98a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:c1:6f:a5:f9:3e:22:d5:a7:3b:8a:ee:38:
3e:c2:12:2f:83:ab:ff:a6:b9:c4:ec:15:6d:8d:50:
94:7f:54:e6:24:d2:17:cc:9e:98:33:a4:e9:1a:05:
68:15:8d:3e:2b:70:51:16:54:42:41:30:b7:f9:81:
72:72:11:ad:62:3e:a6:8e:01:7d:9f:b0:2f:b3:68:
64:c1:62:63:f3:33:45:50:c2:0e:3f:2b:09:0b:30:
9a:d7:6c:37:1a:ed:a3:d1:b4:37:47:50:3f:db:f9:
25:dc:15:9e:b0:3c:36:47:5e:88:08:d2:9d:b1:75:
5a:b8:3d:23:c8:1e:2d:58:16:76:f4:1a:61:aa:0d:
0f:bc:eb:1d:4f:d4:33:99:11:3a:62:3e:c6:f2:49:
40:1d:5c:12:0f:96:d8:af:60:d3:05:ba:1f:ce:f7:
3d:9b:44:0b:89:8a:fa:bd:f9:65:ed:36:3a:ff:90:
d8:6e:a0:13:da:d9:68:33:25:c6:e7:80:be:d9:dd:
3d:1b:7c:93:48:68:be:72:8e:2a:44:57:0b:aa:5c:
d0:54:a9:b5:e8:bd:12:13:cb:87:30:35:70:95:1a:
14:d1:8c:ea:46:f8:e1:ed:73:fd:d9:2b:9b:33:95:
4b:d7:ea:5b:c6:7d:3e:c5:e0:48:1f:12:32:c1:1d:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D1:3F:9E:E1:04:2B:41:7B:4E:4F:B1:37:9D:19:67:54:5C:89:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/389bb65a-6a76-3313-8cc7-a94f640f6356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:81:8b:14:b8:83:17:57:bf:09:10:27:a9:0a:dc:3d:e2:bf:
11:36:5e:e2:87:52:b2:88:cb:f1:f1:da:a4:03:b4:58:5e:22:
9e:8c:86:00:a7:37:4a:12:bb:e4:0c:df:c1:42:4c:16:0a:fc:
db:5f:31:60:7f:84:d6:b1:af:3b:12:2e:4a:43:67:10:e7:dd:
08:91:28:01:c9:a0:c0:5c:6f:1e:31:ff:ba:c6:86:c6:88:59:
c4:bf:91:d9:e9:1e:05:25:ea:81:7f:70:9f:e7:b9:e6:26:e1:
1d:d0:0d:90:70:12:77:59:cf:80:8f:a3:a7:d1:fc:69:93:a6:
6b:f8:75:27:47:39:36:49:67:e8:74:c4:7f:7e:bd:67:49:8a:
ca:81:bf:a5:11:c0:d1:d7:ad:f7:04:e4:79:98:68:d8:2e:d7:
2f:a8:02:20:b8:2d:1d:b1:24:1c:fa:a1:91:94:cc:5b:a7:50:
9f:89:4a:03:48:c6:fb:b4:a7:60:a7:60:63:c9:87:80:e2:c4:
61:7e:30:85:0d:f3:65:9a:24:ce:ae:e1:dd:0e:c4:4d:f5:8e:
a1:dc:ad:1a:05:c8:9d:fc:fb:d2:32:c0:47:20:35:a7:8e:b7:
22:8d:55:d3:2b:ba:5c:b4:40:10:be:b7:2f:1a:d2:99:42:5d:
02:f7:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:35 2025 by rpki-client