Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77e0fecf-980a-3901-8249-bc5e3605d107.roa
File: 77e0fecf-980a-3901-8249-bc5e3605d107.roa (raw, json)
Hash identifier: A+z09Tw0nzEpk43m71UzFSM1XVjPIDabO0k8wT/hKwQ=
Subject key identifier: 9A:F9:0E:A2:95:15:DC:D1:D0:29:49:8A:D7:13:96:6D:5F:19:B8:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B88930EC535607EE9EE6C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77e0fecf-980a-3901-8249-bc5e3605d107.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b8:89:30:ec:53:56:07:ee:9e:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1f5c007f-3951-462a-a009-127c47525591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:81:c0:cb:38:91:5a:13:7d:94:34:78:a8:
a6:b0:5e:e0:01:fa:0d:fe:e1:65:6d:10:8c:af:95:
d2:68:ff:a8:5b:5a:36:5a:bc:24:32:31:59:98:07:
ee:ad:f0:f2:ca:36:6f:67:a1:df:78:7a:3f:89:18:
32:59:b4:58:c2:d9:fb:c3:57:0a:9f:85:c4:d1:87:
42:a8:1d:73:04:66:4d:57:39:09:7b:3c:8a:88:0c:
9d:11:af:a3:29:f3:fd:42:33:45:ec:56:f6:b0:a1:
02:25:44:fc:03:50:f3:78:f4:3a:f8:25:27:94:40:
08:64:b4:09:40:f9:be:e9:06:22:ef:2e:e1:3f:62:
89:44:a0:a5:bf:47:6d:69:b0:f8:59:f2:ed:14:dd:
ac:4a:82:db:2b:2b:e9:07:9f:69:13:a7:88:d6:20:
29:e5:f1:13:b6:73:8a:8c:3f:4b:c7:d4:20:4c:9f:
fd:09:e8:2e:b1:56:9c:e1:ba:ed:7c:08:8d:7e:d5:
02:b1:9b:e9:08:86:4c:bc:72:ac:67:fc:1f:5d:b7:
1b:f0:00:14:2f:0f:c9:80:d1:31:1b:50:03:7d:6e:
48:69:05:50:7b:02:21:97:66:32:0a:a9:4c:92:e5:
0a:06:33:99:84:bf:86:c2:31:5b:ee:84:eb:8d:65:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F9:0E:A2:95:15:DC:D1:D0:29:49:8A:D7:13:96:6D:5F:19:B8:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77e0fecf-980a-3901-8249-bc5e3605d107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:0a:8a:c6:fd:ea:b9:c1:f6:e1:7a:bf:13:bf:e2:3c:af:bb:
85:da:6d:44:07:3a:6b:49:37:d0:e9:b3:18:13:8d:1b:70:c0:
70:29:a4:01:c9:31:ee:5b:76:27:83:f9:bf:b5:c3:3f:45:73:
ad:76:4a:ec:d7:d4:ae:70:93:da:97:ea:68:99:d8:c7:7e:40:
12:47:5f:0b:bd:fe:c9:68:cc:5a:4b:a4:21:11:56:e9:6f:60:
c7:26:df:ba:0c:e1:76:79:2b:50:e2:9d:45:1b:ca:9c:cb:fb:
0b:ac:49:b5:b5:ab:21:0e:0f:c4:2c:c8:44:5c:56:d7:84:8c:
5f:6c:c1:4f:92:77:77:a2:ac:a8:30:94:30:a3:8c:09:0a:ab:
b1:f7:07:1e:ea:25:4d:bc:c7:12:6b:68:ea:47:b0:1d:ac:bf:
d5:a0:e5:1b:b8:0c:2e:26:5b:73:fa:14:10:16:62:d2:65:7d:
26:1b:2d:04:b5:c7:21:ba:11:dd:ab:b2:d9:9a:e2:60:58:b4:
59:e9:32:38:55:90:eb:08:d6:f3:a1:3b:58:8b:21:93:31:b7:
c0:e3:02:64:81:ca:9c:4f:3c:24:dd:b8:74:b1:03:c7:47:e2:
e3:5c:23:13:06:9f:15:af:f3:7b:49:18:e6:cd:44:ea:e2:b6:
10:d8:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:10:19 2025 by rpki-client