Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/749bcc9d-2263-37ae-8d3f-e1a154a265f9.roa
File: 749bcc9d-2263-37ae-8d3f-e1a154a265f9.roa (raw, json)
Hash identifier: /HUwPlGED+GEJd2SzWfssBMSuNc4T0JHgHkSfmE7BCA=
Subject key identifier: 36:99:E3:69:7B:40:FC:84:A9:59:F9:0A:28:B9:CD:FC:5B:DE:C6:E0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C249DE969901EF43CCBF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/749bcc9d-2263-37ae-8d3f-e1a154a265f9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c2:49:de:96:99:01:ef:43:cc:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=84cbfbba-cd8e-4496-8571-08468cf5f6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:80:a9:b3:3b:34:a1:a9:b9:b3:00:15:b5:
12:21:ac:46:c6:21:4e:d5:9b:93:9b:d8:a4:f4:78:
8c:04:33:eb:d8:ff:a1:d0:90:39:1d:6e:a9:e1:84:
95:df:b5:46:43:f9:a4:42:e7:c6:f1:50:ff:d0:84:
f6:ee:39:ef:cc:c3:8b:f2:f5:ab:a5:9e:ac:8b:3b:
59:2f:67:74:b9:b7:2c:93:64:df:e3:6e:2b:e9:77:
d1:3b:27:58:a5:73:eb:e1:bf:af:a0:61:04:ce:bd:
25:e8:d4:76:77:49:0a:96:19:18:81:3d:bc:bc:bf:
b8:7d:e2:04:ef:c7:7d:89:70:ef:5c:a1:bb:d0:aa:
a7:62:b0:c7:7c:27:92:ea:71:47:25:b7:bc:54:8d:
5f:89:34:c6:ec:a9:59:47:43:e5:9c:f3:03:c0:e8:
6c:2d:a7:1e:18:0d:6c:be:53:a7:03:a3:75:60:74:
d5:93:b6:eb:87:a2:39:17:65:d3:15:84:54:83:86:
af:a3:7d:ef:ff:f7:a2:15:0a:eb:91:64:d6:bd:41:
7c:ab:62:31:4e:14:32:09:47:4a:f3:d5:a5:e6:4d:
c6:65:bb:c8:10:88:45:08:70:d6:ba:64:32:f9:a3:
2f:04:b4:fb:81:95:0b:f5:64:91:4f:c8:22:24:ab:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:E3:69:7B:40:FC:84:A9:59:F9:0A:28:B9:CD:FC:5B:DE:C6:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/749bcc9d-2263-37ae-8d3f-e1a154a265f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:38:31:5a:76:2e:3a:12:32:75:f7:f2:7b:3e:6f:2b:5d:0c:
1b:9b:c1:8f:9f:2f:3a:1e:42:3e:62:13:14:43:2a:b1:ef:d8:
73:8a:22:e0:18:70:2b:a7:20:0c:d4:1a:0e:71:eb:f5:18:98:
89:c4:c5:e9:27:97:ce:f3:0d:3e:81:05:2c:b4:14:4c:8d:fb:
01:69:a1:18:bb:34:a8:d0:12:78:6e:86:88:d6:86:21:14:00:
b9:68:15:c1:26:6c:ec:22:86:84:54:0e:a9:cf:39:74:7b:8f:
a5:dd:20:9f:f7:c8:e1:71:29:e7:65:0e:6a:29:73:4e:f9:9d:
f1:82:f8:9a:40:97:2f:39:28:5f:21:aa:b2:21:18:0e:1b:e2:
74:96:5e:62:5a:a3:50:60:ac:40:15:4b:c1:a1:02:f6:99:21:
06:7e:38:30:a8:cf:e9:0d:94:70:77:c6:9c:4e:d0:88:19:41:
b0:c5:da:dc:66:2a:ac:f6:a0:7c:1a:cc:7a:68:29:92:4e:fa:
17:02:b4:85:68:96:e0:ec:e0:1d:30:ef:64:3b:c4:9e:94:87:
16:5a:54:41:f4:83:c7:12:b0:62:ba:76:63:45:d1:44:80:83:
c4:59:5a:63:fa:f2:76:7c:d5:af:16:ca:6c:5f:6d:96:ee:cc:
74:14:90:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:47:47 2025 by rpki-client