Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cec5b84-a3bb-3fa1-917f-6d16d26ab22c.roa
File: 4cec5b84-a3bb-3fa1-917f-6d16d26ab22c.roa (raw, json)
Hash identifier: zCd2Qqiq184DGmX5Wr1vmLbKjTT/6kvAqq9iTqDfTjk=
Subject key identifier: F9:32:C8:5C:CD:77:F7:6F:AA:0F:BE:B3:26:4E:3A:BD:C0:4D:D5:FA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AD0729FCA33ED30DBC6680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cec5b84-a3bb-3fa1-917f-6d16d26ab22c.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.221.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:07:29:fc:a3:3e:d3:0d:bc:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f3f43e65-e06c-4983-b11d-1f5d75aafea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:5f:42:60:80:2c:f2:b9:13:04:a1:3a:6e:
d3:d5:bb:21:87:80:3d:82:37:27:09:4b:a1:cb:3b:
33:1b:61:7b:df:db:45:3d:57:1f:41:df:5b:b6:16:
81:73:73:f4:8a:77:01:fe:99:6d:99:b1:84:10:04:
3e:05:d0:56:e9:7c:26:86:66:ba:41:8c:bb:8d:7b:
ea:7d:12:8d:cc:f9:8d:87:52:08:97:18:a7:de:b7:
55:d0:6d:f8:bb:5f:83:fd:58:70:c1:4b:86:e3:c4:
68:bd:f7:58:04:ba:6e:96:6f:db:a8:3a:46:21:73:
e4:86:51:87:e2:37:d0:c9:dc:2f:e4:1a:88:1b:67:
70:d2:be:5f:a3:ff:ba:db:e0:a2:0c:3f:1f:85:7f:
a6:7d:e3:7f:1b:8d:b2:81:6c:a7:8a:29:1c:5c:02:
97:d3:a2:fb:66:45:34:05:8c:df:dd:77:f2:59:a1:
67:70:ad:5f:47:28:7f:59:2c:52:56:72:b1:b8:a5:
e9:4b:23:8a:50:f4:6f:19:27:4d:7e:45:8f:c0:5e:
20:80:82:f0:e1:20:d0:7f:1e:ba:51:17:62:48:ce:
ee:2e:75:2e:75:06:f7:c3:b0:77:7a:39:64:ba:02:
55:db:8c:58:6e:5d:b2:a4:77:5e:20:59:99:de:6b:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:32:C8:5C:CD:77:F7:6F:AA:0F:BE:B3:26:4E:3A:BD:C0:4D:D5:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cec5b84-a3bb-3fa1-917f-6d16d26ab22c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.221.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ea:0b:d6:26:01:90:6e:24:43:d8:91:8a:f5:24:16:e2:d1:
86:29:6e:0d:eb:a8:1e:69:23:50:f7:d1:c6:c8:a8:8e:4c:27:
d0:5d:b4:db:16:ff:ad:0e:17:d8:50:24:1b:90:ef:82:f3:05:
2a:03:d0:ad:92:04:5c:73:b7:14:d0:7c:d1:d8:dc:8c:24:0f:
e7:d5:09:d0:30:8d:b3:da:8d:6b:2b:0a:16:ed:cc:ba:c0:9c:
35:f0:42:f7:82:b0:d8:36:3f:70:a4:5f:9a:bc:15:7d:55:f6:
46:1b:e0:57:6a:0f:06:c9:84:a4:8c:2d:b7:f7:cb:9f:c9:96:
53:0c:79:30:a3:32:a9:b5:d9:6c:90:ec:f4:06:d5:e8:40:ef:
ba:f8:d2:18:1d:ee:21:67:70:61:e7:fc:73:90:f0:04:88:3a:
7c:c3:63:b5:55:19:4d:90:fd:8c:a1:5b:c3:5c:1d:e8:83:ef:
ae:2c:86:8b:1a:62:2d:1a:60:9e:6c:a0:b3:15:c6:45:3d:84:
6f:f7:e7:e8:5c:77:ba:d7:f7:77:2a:68:32:09:88:de:0e:79:
9b:96:04:6f:c0:40:ae:6d:fb:ce:c0:c8:39:56:55:c8:3e:53:
a9:8c:d2:8d:63:1c:7d:24:8b:55:b5:0f:a8:6f:0f:91:ec:5a:
33:23:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:03 2025 by rpki-client