Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48fd0d9b-cbd2-39f1-b888-acb5a62dfc87.roa
File: 48fd0d9b-cbd2-39f1-b888-acb5a62dfc87.roa (raw, json)
Hash identifier: 4+DhmD0nzUPisx3Ksoq9J7BE5kXbaO0MrXlRLQ73Vh4=
Subject key identifier: 5B:81:A2:AA:EA:F9:59:24:DC:BB:73:1B:12:3B:9F:A1:02:3A:0C:0D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A08DF7A584C8EE2FFFE0580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48fd0d9b-cbd2-39f1-b888-acb5a62dfc87.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:08:df:7a:58:4c:8e:e2:ff:fe:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2882efff-52e2-443c-8229-83c08dad130e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:f8:59:be:2c:38:ca:2c:4c:ee:1b:b9:8d:
a8:5f:5a:20:ff:0b:8c:ac:f5:e4:af:6a:64:e2:16:
36:66:23:95:2c:9f:59:1c:1a:30:4e:01:6e:0f:f5:
af:ca:65:57:b6:1a:be:b8:bf:48:6d:9f:c4:b6:c9:
93:fb:82:6c:f9:c9:65:eb:ca:90:a1:9e:8d:a6:ca:
2f:fb:54:15:c0:d7:4b:1d:6e:95:f2:c1:ec:fb:4e:
dd:54:df:26:cb:38:63:24:76:a3:9b:3a:08:e9:e6:
ac:2e:05:04:b7:18:bf:a6:1f:92:1a:ac:d4:23:ed:
ff:f5:05:35:65:a3:08:d0:8a:e4:c2:fc:ec:28:b5:
da:13:66:d8:47:26:43:6e:1e:15:58:45:c4:35:40:
7b:dc:0d:22:14:b7:06:54:8d:0a:61:8e:0a:62:91:
04:1a:47:40:31:46:34:4c:59:55:97:a7:b2:9c:4b:
b8:7e:56:91:b8:ae:95:01:25:2f:ec:5a:96:12:3e:
69:6c:1e:b9:81:a4:ae:0b:f1:3e:3b:34:c8:4d:1f:
98:bf:38:99:1f:7c:ad:24:c8:c7:05:a0:c1:9a:2f:
7f:cb:14:06:72:3d:37:89:b4:fc:1d:57:3f:ec:14:
87:99:6b:7f:b5:99:87:52:6a:2d:88:a6:3f:37:79:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:A2:AA:EA:F9:59:24:DC:BB:73:1B:12:3B:9F:A1:02:3A:0C:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48fd0d9b-cbd2-39f1-b888-acb5a62dfc87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:81:44:8d:27:04:01:12:50:81:cd:5b:ce:34:4c:0a:ed:68:
aa:48:c4:53:83:ff:73:39:d2:fd:ff:7a:92:9b:a9:4f:45:82:
42:73:e0:4b:01:21:72:4e:3c:65:14:d5:94:ef:13:96:40:cd:
cc:d8:cb:2f:4d:dd:d0:50:5f:8e:ed:08:6e:69:32:bb:7c:2e:
d4:ff:fe:38:e8:0a:88:63:02:c0:d2:31:83:a6:f9:92:3d:c2:
22:75:28:8d:1e:20:82:2c:b8:0b:7b:4d:41:7d:68:66:ec:d7:
3a:a7:da:0c:b5:f9:cb:8b:65:7c:64:03:3e:fa:5e:7c:7e:a3:
90:31:8c:12:2b:3e:7f:ba:a5:bf:0b:aa:ef:31:ec:41:53:cf:
8b:20:83:1e:89:a0:73:e8:ee:d9:ef:35:f3:21:ba:38:61:b7:
4c:27:69:1a:54:03:0d:2e:a7:76:ac:af:08:0b:82:32:25:49:
18:ec:bc:63:89:bb:e3:b9:22:9b:e7:64:43:52:cb:1b:93:be:
14:ae:04:8c:59:48:f0:26:8b:57:19:e7:e9:57:cb:68:bc:4b:
a1:95:24:69:8c:82:f3:94:fd:7d:5b:19:6c:af:d0:57:05:8d:
c2:b7:90:eb:4e:f4:6f:fd:2c:d8:a8:ea:ac:bd:57:a6:aa:42:
70:08:0c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:12:19 2025 by rpki-client