Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e3b44ff-56e3-33e6-b793-7396a7eebfbb.roa
File: 7e3b44ff-56e3-33e6-b793-7396a7eebfbb.roa (raw, json)
Hash identifier: eqppb2TI82IuQSoNYZfrrPy6NN0CYN9n+TNLdV09ZCI=
Subject key identifier: 2A:2A:60:74:E4:A3:DC:F3:02:2B:55:D1:48:45:8E:3D:F3:8D:D8:81
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AAC40EDE77D3EA12E458C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e3b44ff-56e3-33e6-b793-7396a7eebfbb.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:c4:0e:de:77:d3:ea:12:e4:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=fa8774cd-4965-4ac8-9fe2-a4913dcc3563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:59:3e:ad:5b:15:42:05:c6:77:5e:54:bf:
25:d6:a9:28:87:b0:1c:1b:b5:93:48:57:57:85:62:
ff:b6:5f:35:99:c3:2e:8d:3c:cc:ae:66:65:51:ab:
f2:d8:e7:11:07:47:ef:22:97:21:f3:06:ba:1a:55:
a1:e3:67:cc:c8:f3:ee:4d:b0:ff:a9:a0:71:06:42:
f8:36:dc:26:7a:d4:ad:7d:48:69:e7:dd:71:76:97:
e1:e2:07:56:5b:52:07:27:0d:a7:13:40:66:41:39:
44:ea:48:6d:70:09:fb:f1:91:31:b8:c0:72:6b:5b:
d8:d6:0c:bf:1c:7d:50:a6:95:4a:68:09:a4:f5:ce:
70:be:5e:a4:af:1a:55:e3:c7:e7:43:e0:01:c3:c8:
1b:d9:78:ff:f3:9a:23:85:15:c9:5c:77:8f:6c:26:
28:c9:d8:94:89:fe:93:b3:1c:00:2c:59:43:8e:de:
cf:20:a6:64:28:64:15:be:5d:ee:1f:6b:bc:d5:8c:
e6:b4:3f:7b:a6:f8:f4:45:96:f6:0b:d1:fe:52:c7:
29:3f:2d:30:4b:f4:df:c2:3d:ba:27:eb:7b:e5:8c:
da:10:1c:ce:5a:32:75:e3:53:ad:b1:63:67:02:5e:
4c:0d:57:33:f7:f7:fa:a0:3d:90:25:b3:eb:96:5d:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:60:74:E4:A3:DC:F3:02:2B:55:D1:48:45:8E:3D:F3:8D:D8:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e3b44ff-56e3-33e6-b793-7396a7eebfbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:41:35:01:c8:13:fc:ac:9d:8f:05:94:f7:13:09:25:75:ca:
74:2a:e2:29:fc:1f:ba:bd:52:25:7c:e1:72:09:ab:94:43:15:
d1:36:eb:1d:12:12:6e:51:7d:2e:1e:66:b3:da:ef:7c:8f:60:
68:65:fd:9f:da:07:86:21:d0:d9:80:7c:4a:ba:0f:25:8f:8c:
1b:c2:fa:bb:92:bb:09:06:d7:65:c6:4b:3b:c8:d2:c3:3a:d6:
36:47:00:25:48:62:1d:3a:34:01:d1:51:1e:15:88:79:47:cb:
a1:f8:d0:ff:db:ff:ce:97:71:85:bc:99:5e:a3:52:9a:cf:cd:
7d:56:be:69:a0:31:6a:ad:6a:50:23:6c:39:c4:bc:cb:ae:d9:
ad:87:5d:34:e3:be:75:7b:3b:9d:7e:9c:cc:38:4c:26:cc:20:
2c:1e:52:6a:58:59:9d:12:dd:a7:8b:4c:57:72:d2:0a:c1:5f:
56:3d:60:40:77:1f:2d:22:df:ab:77:c9:53:4f:80:48:51:08:
a5:37:9e:82:a9:e9:a5:93:a7:a5:d3:05:60:fa:f3:af:e9:c0:
0e:8c:b6:58:55:26:a1:5f:49:fc:9b:ef:e9:bc:71:23:5f:15:
b0:dd:0f:a5:b7:56:89:af:3f:a2:ba:1b:f7:cb:82:1b:8d:2a:
dc:64:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:47:28 2025 by rpki-client