Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/623e3047-1f13-365f-aadd-2b5d18f471a4.roa
File: 623e3047-1f13-365f-aadd-2b5d18f471a4.roa (raw, json)
Hash identifier: t9pF2tbSAn/Xm+PSQRU42SLiROZLCho3LWo3VNhqEzs=
Subject key identifier: C0:41:79:13:CB:AC:4D:69:9E:05:23:08:BF:D7:DF:78:5A:91:5D:AC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8DBCF35B340D86928387C40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/623e3047-1f13-365f-aadd-2b5d18f471a4.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:db:cf:35:b3:40:d8:69:28:38:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=14c9bd5d-56b5-4e1d-b45b-55abd8bd131a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:71:6c:02:06:c4:04:5c:d2:54:40:bd:66:
e9:3a:3f:0a:75:05:9a:d9:f9:25:41:0c:fc:12:ac:
65:26:05:1c:5a:ab:ce:55:cc:22:70:46:28:4d:fc:
4d:dd:27:5b:98:0c:8c:f5:6b:64:7b:bb:65:01:43:
9d:38:cd:18:c9:58:b0:4f:f9:dd:cf:d5:63:8c:2f:
2d:ca:88:82:0f:63:42:51:9f:81:02:e6:10:5e:a6:
89:b2:83:01:e3:14:7c:76:73:ee:9f:e2:5f:33:26:
78:9c:93:c1:86:29:f7:a5:93:40:5d:a2:73:74:60:
03:e1:72:e6:73:ad:e7:25:d7:bf:c7:83:79:00:77:
bd:ce:9a:bb:33:87:96:ab:69:01:b7:ad:4c:76:16:
cc:16:9a:fc:d1:8f:bf:79:68:59:99:be:5c:80:da:
41:49:4b:eb:1a:9e:e5:4a:dc:cb:6e:0b:36:df:0a:
c9:df:b3:a0:29:82:ca:39:39:03:3e:01:f1:03:d4:
d8:00:25:35:cd:f8:c3:92:02:7b:f1:46:05:03:cf:
13:47:24:80:3b:08:cc:91:cf:e8:11:62:76:67:0a:
41:88:f7:e0:c8:83:8d:bb:a9:c6:f7:ca:b7:ba:8e:
dc:9a:ac:fe:56:9b:1f:97:90:92:1c:2a:bd:66:41:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:79:13:CB:AC:4D:69:9E:05:23:08:BF:D7:DF:78:5A:91:5D:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/623e3047-1f13-365f-aadd-2b5d18f471a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:bc:ea:fc:72:a7:71:c1:40:b2:3b:c1:dc:5e:30:e1:46:c0:
5a:6a:0f:77:22:11:51:04:02:c0:56:b7:29:34:42:43:6b:a2:
62:63:95:62:54:58:de:55:72:f2:10:f4:74:89:cd:dc:b5:39:
3c:4a:b3:35:51:10:c0:e3:3c:68:e0:9a:61:1b:fd:da:5b:5d:
8c:85:ed:5f:63:ed:a9:7e:55:60:d5:03:64:fe:f7:e3:65:25:
54:5d:20:8f:bc:fc:b5:10:6e:84:6d:97:ae:03:ed:b9:13:20:
5b:1d:67:2a:42:9c:60:e1:02:e8:4b:83:c7:7f:98:be:0e:59:
1f:ac:5b:75:c4:a9:ea:65:5c:f4:8f:e9:11:00:da:81:70:02:
08:0e:b6:fe:e5:ec:2d:30:58:9e:42:96:27:56:f4:78:1e:ef:
ac:7e:5c:c0:bc:93:cc:24:bd:54:41:c0:90:25:12:2a:61:51:
66:a3:53:fb:ba:14:88:c0:b7:5e:ff:f3:c9:99:be:0d:27:d8:
e6:15:15:9d:eb:c4:df:a3:28:e7:9c:a6:a8:f6:4e:9d:2b:02:
14:7d:0f:47:63:c1:35:6e:3e:fa:53:61:55:db:53:22:86:6d:
19:ed:62:fb:36:fc:bf:5f:3a:3c:5e:92:fa:a7:e7:8a:e8:6e:
09:3f:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:38:25 2025 by rpki-client