Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7acff78d-d5c5-37e3-93c3-c0bafa257a48.roa
File: 7acff78d-d5c5-37e3-93c3-c0bafa257a48.roa (raw, json)
Hash identifier: aAsvsy2ozSDG/bq4WDD9XtwRr5t4AKKa2+Zs60wwz6A=
Subject key identifier: FE:1D:B6:69:B2:2D:55:15:90:A9:DE:F7:27:A1:58:E7:18:24:F6:75
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BFFE7BE38FCF8F329A4480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7acff78d-d5c5-37e3-93c3-c0bafa257a48.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.223.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bf:fe:7b:e3:8f:cf:8f:32:9a:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d58ed1f2-7064-4b8f-b2e2-87f262c4f237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:23:ad:95:a5:03:2c:a3:a0:e3:b2:94:7a:
2f:06:e2:ff:bc:02:66:d3:85:5b:85:83:04:71:a1:
56:9f:52:88:c7:8b:0e:63:0b:0a:3a:8a:10:72:3d:
cd:fd:40:c8:14:93:0a:c0:9c:cf:44:ee:f2:df:49:
e8:32:3c:a4:aa:c6:f6:c2:1d:57:fd:6c:4e:6f:bb:
b8:67:51:b5:05:51:5f:6c:be:39:d5:d7:f4:8b:49:
55:e4:6f:2b:70:9f:2a:14:fb:d2:93:f3:ad:1f:cd:
d9:72:e1:5e:b9:9b:79:4f:c6:66:a3:09:70:16:59:
1a:ae:d5:23:9d:9c:0c:a4:18:57:a1:4a:e0:d7:cb:
0a:b1:fb:62:9a:55:54:aa:91:f9:78:e7:fd:32:42:
35:fd:d7:28:6f:8e:e5:b4:23:58:db:8c:86:85:a6:
5d:8e:24:bc:f9:d9:b0:58:09:15:d9:d1:cd:d0:a5:
08:bc:ce:c8:40:b4:a2:9e:c4:77:2c:0a:35:19:25:
a3:7d:be:1d:80:8e:ff:7b:ee:50:9d:25:63:d7:12:
30:c5:27:3a:2f:94:70:f5:ae:d0:3f:3c:49:a7:a0:
fb:59:c5:7f:df:0b:e0:5f:2d:b2:27:25:1b:79:0a:
d7:84:b7:5f:62:7b:e5:3d:52:7a:46:6e:03:c7:7d:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:B6:69:B2:2D:55:15:90:A9:DE:F7:27:A1:58:E7:18:24:F6:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7acff78d-d5c5-37e3-93c3-c0bafa257a48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.223.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:95:20:e7:80:b9:e0:6b:91:ac:3d:cb:1e:31:2b:43:ce:33:
2d:1b:1d:05:b9:81:b6:c5:68:f6:2f:ae:ba:28:20:8d:6f:86:
c8:d1:f0:f5:d4:6f:6c:91:3c:5b:24:4d:43:0e:9e:d6:a8:5e:
2d:72:78:e1:28:34:a5:fe:bb:45:4a:6b:21:f0:cd:16:06:b6:
87:0d:dd:6a:5d:9a:3f:d8:c7:5b:67:71:c0:25:7f:40:51:87:
3e:71:0b:c7:fd:a7:20:87:25:68:1d:4e:40:df:12:fc:7c:85:
5d:85:e6:29:26:07:fc:2d:e5:45:e5:d8:8e:bd:7c:c4:1e:73:
10:67:8e:cd:fb:f4:f6:51:34:4a:c8:35:e6:86:90:36:a4:ce:
4c:ac:67:63:1c:54:58:28:48:79:fc:71:18:74:50:32:b5:d0:
34:bb:95:41:4f:32:b2:35:24:5d:00:1d:61:ea:4c:e5:84:4a:
c0:85:fe:bd:8a:78:36:15:78:ea:f6:7f:af:14:8e:91:ee:dc:
23:ea:46:a8:b9:a1:b6:d1:8f:e7:07:37:27:78:10:ab:f4:1f:
0d:1a:9b:91:b0:4e:df:5e:1d:7b:95:f5:99:6c:16:3c:bb:e3:
38:9b:52:11:ee:32:2e:b6:f9:36:a0:83:4a:cd:11:d2:65:a2:
ec:c0:a1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:50:00 2025 by rpki-client