Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67bcb3a1-62dd-3424-94ec-6e48d31a8fb6.roa
File: 67bcb3a1-62dd-3424-94ec-6e48d31a8fb6.roa (raw, json)
Hash identifier: ffdX8QoYf1oL3UGcd/tc825w0zawxhctgNUZ3pey3Jw=
Subject key identifier: 1E:FC:1A:F9:3F:68:FE:9A:8E:6C:54:DB:E2:8C:08:00:BF:DD:77:F1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F936DCE0A9897F33F67D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67bcb3a1-62dd-3424-94ec-6e48d31a8fb6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:36:dc:e0:a9:89:7f:33:f6:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c200f103-c6d9-4f6c-9bab-57d95dd7e930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:e1:c4:0b:56:0e:8e:da:0f:f3:df:ae:fc:
6c:96:64:e0:7c:f6:ee:56:15:3b:48:12:0f:6e:bb:
85:cc:db:e8:e2:8c:40:46:8c:3b:fc:b4:16:41:d9:
25:7b:22:5a:25:05:05:5c:3e:67:07:fc:67:99:4a:
d3:8c:30:5f:28:a2:37:ac:c9:e2:5b:7e:b6:cf:4a:
16:f6:3d:81:a4:21:00:b1:82:8d:a3:f5:df:d3:74:
9b:da:8f:f5:d9:b4:62:01:af:0a:67:a9:83:0e:73:
02:24:52:eb:3a:21:7c:4b:76:40:3f:e0:69:c7:00:
8e:ba:7e:89:00:ff:a3:19:e6:65:9b:12:0b:79:ef:
ff:4f:ed:f6:2e:c2:8f:7e:13:cb:13:d2:38:1d:cd:
c4:c7:92:80:5b:f3:d2:b7:74:32:93:7b:04:a8:39:
f1:9e:df:88:00:75:ae:93:06:8a:39:b6:a1:99:5f:
3e:dc:f5:73:57:7f:43:ee:64:19:bc:0c:42:11:df:
eb:a9:79:a3:46:a4:83:54:9d:cf:80:1f:1a:d8:67:
a2:2c:6c:51:67:36:66:e3:3c:6c:e8:e5:45:12:9b:
21:d7:0b:21:ac:3c:26:c8:ac:64:f0:21:97:9d:73:
8f:1f:60:a6:37:c1:85:e0:40:31:29:d5:1f:87:9b:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FC:1A:F9:3F:68:FE:9A:8E:6C:54:DB:E2:8C:08:00:BF:DD:77:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67bcb3a1-62dd-3424-94ec-6e48d31a8fb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:cf:a5:c8:de:ca:b0:82:81:e4:49:c9:e1:28:1d:69:13:2c:
44:6e:f6:ea:cf:26:57:cd:99:25:47:af:59:3f:31:a1:40:3c:
46:86:aa:3a:7d:d4:50:4c:ed:1e:a4:55:3a:70:9d:c9:43:53:
13:e7:20:96:50:07:33:7f:9f:cd:fb:eb:d7:a9:e2:01:95:e4:
a5:9b:4a:f8:b9:de:5e:48:d3:79:ad:e9:4a:51:81:ae:7d:2f:
20:9a:0a:f5:c5:1e:12:b8:4b:84:cd:80:cb:62:15:79:04:b5:
73:c0:70:01:32:d7:07:09:7a:62:c8:e0:4a:39:a8:e7:2e:ed:
8f:3f:84:3e:6c:b2:54:5c:7e:13:a6:38:06:38:0e:e9:96:59:
71:b5:e6:b6:8f:ab:9c:30:39:43:88:a8:63:f6:5f:ae:1b:3c:
0e:09:e3:16:6a:dd:ad:7c:97:2e:70:15:2d:57:ef:73:b9:84:
ac:3a:8e:2b:af:19:6e:2c:f4:6e:73:47:a9:0f:b1:8d:eb:b8:
d0:0f:d5:db:d9:0f:23:52:a2:dd:d6:dd:3d:54:c6:58:89:39:
39:cb:61:4a:92:98:93:a3:04:24:62:2a:f4:32:4c:5e:dd:7d:
2b:5d:e2:57:66:00:eb:bf:39:2a:32:c1:3a:b9:66:d7:47:c9:
7b:86:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:38:21 2025 by rpki-client