Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f02436-75b5-3d12-bdb5-3aead3f9c3d1.roa
File: 52f02436-75b5-3d12-bdb5-3aead3f9c3d1.roa (raw, json)
Hash identifier: +njfRWlUJaPpkC4+VCGOAl+C+DOsdJVSZ4sxjijd64I=
Subject key identifier: 41:31:06:9E:22:C9:3D:C8:B3:2E:30:D3:4B:96:D0:8E:1B:56:28:B5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A440CB67B16C6C1FEF7480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f02436-75b5-3d12-bdb5-3aead3f9c3d1.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.247.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a4:40:cb:67:b1:6c:6c:1f:ef:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=63cca202-1929-449e-bc97-a3c9f7ff3902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:04:bc:ad:6f:aa:9d:c4:cf:1b:08:d4:5b:8f:
dc:99:52:cb:e2:53:b4:98:ae:26:8a:b0:a2:ab:b0:
f8:a6:09:8d:be:5e:fb:33:d9:f2:fa:e4:7a:21:53:
02:50:24:04:35:71:c7:8d:2c:8a:ff:99:cf:e6:be:
1c:06:90:f9:2e:e5:8f:8c:fc:3f:4a:2c:04:5a:71:
d1:1e:fc:9c:02:d9:56:21:7a:b8:79:3e:ea:0c:e8:
15:75:91:26:e3:43:16:19:53:19:fe:33:c8:03:99:
9c:fd:c1:99:88:a1:b6:06:3c:03:44:76:00:cc:f9:
9b:68:58:0b:6a:a4:d7:b9:01:31:14:09:3e:e2:5e:
bf:4b:e3:3f:2f:09:6b:0e:6f:3e:33:af:59:3f:60:
6d:67:8c:fb:0b:6b:64:ce:cb:09:ee:6f:2e:4c:26:
a2:05:3d:dd:51:b8:58:e3:e2:c7:78:71:37:92:2c:
f0:1b:8f:0c:11:26:fb:9e:c5:13:b5:0b:76:ca:24:
75:4e:32:70:b1:96:a9:04:82:99:31:35:55:91:ab:
20:fc:e9:2c:b4:fa:96:84:99:88:a6:d6:3e:f6:eb:
2e:0e:fe:a7:e3:32:bc:86:0a:07:81:c7:84:6b:a2:
0e:8c:e6:5d:68:6b:e7:be:9d:fc:90:d5:7f:2a:a4:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:31:06:9E:22:C9:3D:C8:B3:2E:30:D3:4B:96:D0:8E:1B:56:28:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f02436-75b5-3d12-bdb5-3aead3f9c3d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.247.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:29:7a:25:cc:ea:8f:3d:87:84:cd:6f:ec:fb:d4:ec:ff:5f:
0e:19:a3:95:1e:9f:70:71:1b:51:c8:e8:a2:13:6f:86:01:28:
08:d4:6e:8d:04:51:9d:4a:ee:58:ce:ff:ef:79:27:5f:3c:c6:
4b:7e:7b:7d:b2:b3:02:43:aa:74:29:6b:10:1e:3c:8a:0a:5f:
1c:3e:34:e6:da:c6:fe:6c:d9:e5:8b:6b:db:da:97:52:7f:55:
45:02:ee:54:24:f7:2d:0f:1a:e2:fb:08:af:49:79:8b:ad:3d:
12:56:22:2c:47:f7:ab:57:85:0a:e5:36:27:2d:83:9b:b2:30:
77:fb:f0:9f:99:2b:83:33:bb:06:e3:2a:ce:28:5c:e1:1b:d9:
28:70:cf:a4:2d:06:a4:89:97:32:9d:9f:4d:5f:0a:2c:28:8c:
7d:c2:a0:3c:fe:46:5a:b0:82:f9:0c:89:f3:cc:0c:f3:b7:b2:
21:a2:05:23:94:f3:68:a9:de:55:87:fb:d4:f1:dd:26:54:2a:
c0:66:e4:f1:64:12:d9:3b:aa:85:ee:4e:30:ad:04:89:fb:6f:
d3:bb:08:e2:16:7d:37:ba:d5:28:73:85:f6:23:15:41:88:58:
47:69:fd:69:9b:ea:3d:76:e1:79:f6:8f:cd:a8:3a:72:14:fb:
1b:df:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:46:17 2025 by rpki-client