Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d394f3b-4a04-315d-a3d3-002afb79feb6.roa
File: 7d394f3b-4a04-315d-a3d3-002afb79feb6.roa (raw, json)
Hash identifier: nNwxXIeV+99Vn/zqpPTh4hU1jqceNTFjMT973IHYMyU=
Subject key identifier: 39:8F:9C:6F:66:08:8D:89:03:2F:A5:CA:67:B7:75:38:2E:AD:5C:0D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B1DDC0B5C98E61EF4D2C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d394f3b-4a04-315d-a3d3-002afb79feb6.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b1:dd:c0:b5:c9:8e:61:ef:4d:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=78feee6c-5a2b-4df2-bd1f-d15147b8c1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:18:fc:79:74:83:5f:e3:ca:cf:6b:91:c7:
95:b1:ce:0b:1f:7b:ec:75:2d:29:6b:8b:37:0a:60:
43:fa:97:79:7f:27:b8:11:ee:18:e0:a6:d5:f7:15:
26:9b:25:bd:cd:89:a7:96:f9:13:37:7d:d4:37:c5:
5c:c1:69:ee:3b:54:c8:ff:fa:01:85:c4:60:99:d7:
8c:f8:85:45:d4:39:58:d3:e6:83:ea:dc:b4:45:b0:
c1:6c:7f:ba:d5:46:78:c2:67:2d:41:34:d1:63:68:
80:a9:91:25:e4:7c:c4:57:db:e6:83:0b:c5:45:f2:
91:43:2a:49:27:34:06:75:e3:28:f2:98:26:21:27:
16:07:43:e3:b0:7f:66:5e:d8:04:a7:ca:d9:0a:ef:
a4:b8:17:c4:04:bb:7f:43:be:80:b4:79:62:03:bc:
19:3c:91:17:83:05:be:22:56:75:da:9e:ba:d1:60:
e3:d3:23:5c:d1:cb:e7:0f:90:7f:a3:5c:36:7b:76:
39:ae:bd:3e:68:29:3f:fe:83:7d:26:e5:f5:22:18:
74:f0:43:7a:92:17:ec:d9:5e:71:3f:5b:57:94:51:
e0:96:ee:63:e9:ba:05:c6:05:59:da:11:c5:0c:3c:
9e:ff:67:54:3a:44:7c:f7:06:9c:ad:bb:37:85:6c:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:9C:6F:66:08:8D:89:03:2F:A5:CA:67:B7:75:38:2E:AD:5C:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d394f3b-4a04-315d-a3d3-002afb79feb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:a2:12:69:cb:90:3c:98:b3:10:2b:0b:69:18:f7:ed:05:61:
d5:92:f9:cc:ed:48:55:60:e5:9b:f2:6f:8c:5d:00:e3:c7:f1:
36:a9:79:cc:4e:c0:7b:67:8c:79:96:c7:16:85:d6:2a:25:68:
9c:3f:9a:ea:e5:0e:b7:64:86:8c:ca:57:86:c8:6a:01:2c:e7:
d9:98:1a:ce:dc:28:0b:56:8d:ec:8b:1b:92:90:a3:f3:de:0b:
59:25:cf:d8:b7:5b:27:b9:fc:49:6c:87:e7:69:7f:0f:bb:14:
90:06:d2:f1:f3:2c:d9:21:58:69:44:d9:a8:37:24:6a:02:bd:
1a:74:d9:32:c1:51:8c:0d:7d:52:35:f1:ad:91:97:af:50:b9:
5f:6d:56:3c:92:7b:ee:2a:cb:9d:35:a9:ad:fb:eb:80:9c:a8:
e9:07:d8:0c:38:c5:26:26:75:33:ac:a6:46:76:31:8a:0a:d9:
5d:46:3d:01:e3:c5:7c:9e:f5:fb:f6:34:fa:3c:ff:41:52:bc:
58:d5:a6:27:90:32:f3:65:33:22:e5:2a:01:0a:e2:b8:c0:3e:
cb:c8:0a:fa:ed:8f:c8:67:c6:d1:60:04:9a:77:07:37:6e:63:
71:c5:68:a6:6e:14:d9:d9:a0:70:26:95:67:b4:ca:ef:16:76:
a1:d2:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:52:48 2025 by rpki-client