Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b3521d9-e85f-317f-963f-81fcde270461.roa
File: 5b3521d9-e85f-317f-963f-81fcde270461.roa (raw, json)
Hash identifier: POJCrG/1MIUrH1Ii+oG3645nbfeuP01ztZPLRnjadTA=
Subject key identifier: 38:36:A9:AF:11:B3:1C:A2:CC:A5:C4:24:F4:95:69:10:44:00:5C:1A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A20C9BE3DD9B63B07EAC2C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b3521d9-e85f-317f-963f-81fcde270461.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.221.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:c9:be:3d:d9:b6:3b:07:ea:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c0c70ca8-a5b0-46d0-b3ab-98c7308cfe29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:e2:21:9c:c1:2e:57:6f:2d:4e:43:c9:65:
3c:00:d1:82:34:a1:0e:8e:38:c3:cc:3c:bc:4e:da:
ef:bc:05:50:c2:82:00:cf:14:d9:d9:9c:d2:96:20:
30:d1:41:f2:0b:16:09:52:62:ae:79:b3:94:1b:49:
e8:00:30:ef:69:ef:bc:9b:90:30:b3:63:a1:6d:a4:
7e:71:66:1c:8f:61:8d:57:a2:5c:29:8f:73:2c:38:
86:dd:86:61:9d:83:40:4b:c1:75:85:7b:8b:b7:8d:
13:ca:3e:6d:b7:f6:3c:3d:53:c1:06:42:07:f4:7f:
8a:f9:c8:30:7e:42:30:19:84:ce:c9:94:54:99:e8:
17:84:bd:b6:96:1f:c7:0f:98:0d:56:3d:8d:a0:b7:
9e:50:14:40:8f:af:b6:f0:74:9c:4d:77:50:60:ec:
02:96:bb:75:b4:d0:9d:0d:91:bc:69:7d:9c:74:ff:
eb:5b:3e:53:f8:3b:c1:88:51:49:8d:e1:03:fb:fc:
e2:03:db:33:6b:4d:76:5c:c9:d8:3e:f8:f2:f6:56:
19:2e:6e:ee:d6:1b:50:bf:57:7b:61:83:3c:f9:e4:
b8:ba:5f:18:43:b9:ad:f5:cf:06:04:d6:67:20:72:
d1:f0:85:ca:f6:53:d2:29:15:b1:2a:ac:fc:0f:a5:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:A9:AF:11:B3:1C:A2:CC:A5:C4:24:F4:95:69:10:44:00:5C:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b3521d9-e85f-317f-963f-81fcde270461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.221.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d2:29:9a:d4:a6:48:b4:fb:2b:9b:01:00:4c:f0:45:55:f3:
0f:54:52:67:ad:43:2e:38:b9:b4:bf:cd:5b:61:50:53:15:9d:
f1:21:36:9d:6f:7d:96:da:ee:a8:ae:8e:56:b5:ed:74:32:7d:
2f:27:a1:5e:c2:03:0d:f9:bf:4d:0b:46:b5:dd:e4:93:f0:c4:
4e:3f:fa:f7:70:bf:7b:7b:15:2d:d4:2e:42:13:e5:20:d6:2b:
96:b4:05:a1:56:fe:a6:0f:0d:ca:b9:c4:4b:eb:d4:1d:b8:a6:
20:48:f2:2c:32:e1:1b:36:ee:7f:87:d3:0f:4c:e1:6f:44:7e:
88:68:6c:f1:bb:03:5e:bd:3b:f3:d4:ff:9f:52:94:ed:d5:f9:
88:81:97:d6:d8:a3:86:10:d1:77:35:70:ff:b3:49:cd:2e:2f:
1d:a6:18:bb:b6:25:2d:5d:af:e2:09:c3:66:2b:9e:92:12:e7:
0c:53:96:1a:d2:7d:60:bb:41:ca:f7:9b:e9:c7:2c:47:fb:62:
cb:64:52:2b:3a:cf:a5:0b:03:70:12:21:10:32:07:72:2a:0a:
62:65:ef:ae:5e:cb:22:c9:c6:9f:2e:86:d8:25:2d:51:e4:30:
c6:a0:24:8c:46:c9:dd:6a:71:67:46:9e:3d:a6:d8:49:fd:0f:
c7:80:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:35:40 2025 by rpki-client