Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a0b5447-753d-3862-aaf2-2cc0b7ca5c19.roa
File: 3a0b5447-753d-3862-aaf2-2cc0b7ca5c19.roa (raw, json)
Hash identifier: NTog4PMz9pNMsWS3NjcA8tp7POJE8MWQbcgMhzZ/LJA=
Subject key identifier: A2:51:D2:78:FC:E0:8B:A0:4F:40:A6:B2:12:C7:C2:BB:35:3C:FB:82
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA79ECF195F76571B46052940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a0b5447-753d-3862-aaf2-2cc0b7ca5c19.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.242.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:cf:19:5f:76:57:1b:46:05:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=97198d6b-03c4-445e-bc1a-2e4b0e44458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:7e:dc:2a:c3:4f:f2:ec:a1:dd:f8:b1:0c:
33:38:d9:db:5f:55:d5:3a:94:f5:e8:c1:c7:f2:68:
31:81:38:8b:8a:32:24:28:17:8e:40:a6:b9:98:23:
1f:d6:15:ec:a1:08:82:4f:11:b2:2f:f0:33:3f:d1:
ad:c2:1c:6e:d3:76:42:c4:f6:39:e0:74:76:b2:00:
55:89:eb:d3:ab:04:15:94:68:67:6f:c0:98:a7:28:
1b:74:6e:77:ec:db:5a:28:23:2b:2c:9f:52:c0:d7:
9c:e2:99:f0:c1:39:1a:73:01:7b:c4:24:66:a6:32:
22:00:c2:b5:8b:a9:b0:b6:3c:83:32:4d:e1:21:54:
6c:f3:ed:30:a2:08:21:a1:31:4b:92:6e:79:fa:86:
69:78:88:6e:57:65:b3:4a:ae:3a:59:a2:bf:14:4c:
b3:9a:ff:b5:85:95:74:2c:68:45:f9:b3:14:e7:c6:
2c:55:43:80:79:a9:16:48:be:d5:2b:37:7a:11:96:
47:3b:af:39:17:8b:b4:1e:c6:f6:71:91:47:cf:41:
c1:25:ce:d9:98:76:b9:50:b2:15:1a:ea:26:e7:8d:
a7:1a:a0:60:f4:d7:d8:6a:9a:b3:65:55:94:25:7a:
7b:e3:99:5d:58:84:da:e7:ad:07:61:61:78:f2:fe:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:51:D2:78:FC:E0:8B:A0:4F:40:A6:B2:12:C7:C2:BB:35:3C:FB:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a0b5447-753d-3862-aaf2-2cc0b7ca5c19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.242.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:75:a3:28:d2:bd:8e:6e:fe:6c:57:77:dd:f1:d3:74:b5:0c:
2d:6a:df:b9:f6:19:45:99:13:42:12:43:2c:d1:d0:66:a0:e5:
fa:5d:35:17:f0:12:bd:73:0a:60:6c:d7:b0:6e:18:1f:fd:d1:
0f:bb:eb:d8:be:55:cd:10:67:a2:d3:85:bf:e0:5e:4e:07:be:
5e:eb:0a:e0:c2:fa:ce:0b:ba:64:4d:d7:bd:5f:a2:a1:cf:bc:
df:41:3d:51:2d:54:74:43:8c:05:81:b3:cf:e5:ed:49:75:2a:
24:a4:63:89:3f:69:62:e5:6c:df:48:e5:64:68:de:a2:f2:64:
64:90:b1:ec:f9:86:b6:08:a5:cf:26:98:a1:57:ee:16:74:c0:
b2:f5:69:14:43:49:66:be:50:9d:0f:b9:09:32:de:e9:7b:61:
4c:2e:eb:d6:76:84:f2:a5:34:96:59:d7:a4:a0:e6:c3:c7:4f:
60:1b:ca:27:5c:f0:e6:4c:6c:c9:16:ca:fa:5e:fa:de:af:4d:
60:ef:c1:b6:df:77:7d:3f:4e:09:70:da:ef:4e:1b:cd:ae:13:
33:f5:9c:11:75:e8:66:73:b2:f2:b1:7f:ab:50:54:6d:7e:47:
05:09:18:6e:7d:d2:ec:38:e3:38:6d:91:83:b9:e8:9d:c9:28:
9f:7f:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:58 2025 by rpki-client