Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8125a537-6fe2-3987-a4e4-c29c5b76771b.roa
File: 8125a537-6fe2-3987-a4e4-c29c5b76771b.roa (raw, json)
Hash identifier: kPQhQX1nQ46d4ld3LFlaniVOzfQfLOT7Xrh43HfRNms=
Subject key identifier: BA:0C:06:4F:E2:1D:73:A8:8C:4A:11:55:9A:DC:B9:29:D0:67:1C:4F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BF5904A4A3BD218B46E700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8125a537-6fe2-3987-a4e4-c29c5b76771b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 35.240.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bf:59:04:a4:a3:bd:21:8b:46:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c004a3a7-658e-410a-9487-a95640f55fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:ed:55:1b:3e:3a:3c:cf:08:69:02:86:6f:
9e:dd:e3:31:e4:83:e2:39:37:62:ce:d4:a2:d3:35:
c8:cc:66:4a:59:2f:25:4a:5c:71:00:11:ea:4a:88:
f4:b6:c9:7c:b6:89:d1:4e:8a:b8:9d:19:92:a7:cd:
66:1c:e8:97:17:0d:91:22:79:38:94:7e:fb:4d:3d:
fe:3b:65:23:a2:ba:ab:b3:38:33:91:b6:60:40:7a:
6f:98:f0:63:4d:4e:d8:c1:3f:9e:17:41:f7:da:bf:
65:01:06:7b:fd:4d:03:7d:60:ea:82:94:ac:1b:de:
c0:70:14:92:d6:a0:1d:7b:2c:f5:00:8e:c5:64:6f:
a0:2f:7b:a9:19:20:51:e3:8e:9a:36:fd:c9:88:61:
54:c5:a4:62:31:46:ce:50:8d:68:ea:82:f3:40:e7:
7d:49:6f:98:f0:7c:fb:8f:c6:3e:82:ca:b8:b4:4b:
91:e0:36:57:91:22:ff:23:02:40:83:36:04:b1:55:
26:e5:c6:20:c3:06:99:98:36:50:64:41:4d:1a:92:
93:c7:16:b5:d3:04:09:ce:2b:75:89:ba:51:e8:a5:
42:1e:ad:f0:61:83:8f:cc:9b:6d:c1:07:ee:eb:e1:
40:6b:61:fc:73:7f:e7:47:9d:80:42:0e:f4:2d:a8:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:06:4F:E2:1D:73:A8:8C:4A:11:55:9A:DC:B9:29:D0:67:1C:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8125a537-6fe2-3987-a4e4-c29c5b76771b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.240.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:ae:88:fa:1e:5e:83:48:52:f0:ac:f7:73:15:6d:29:02:3d:
5a:f8:3e:28:72:84:69:dc:6e:50:9b:18:d5:1a:2e:9b:1c:7a:
de:66:df:6f:84:e4:81:e6:5d:a8:5d:84:a3:8c:57:b1:13:47:
f1:78:f8:f2:00:2f:ac:62:a5:6c:41:91:35:13:d4:c8:f6:3a:
ae:29:b3:58:b1:b6:ef:44:3d:5b:73:2c:ad:4f:e4:7d:9f:89:
c4:47:dd:5f:9f:9f:e9:25:80:e3:85:33:a6:21:8f:1f:49:81:
0b:6b:e2:70:52:85:5d:32:18:c7:db:37:46:7e:2a:8a:e9:90:
b8:ba:67:35:2a:66:80:b0:ef:94:08:fa:29:68:59:a5:78:1b:
34:9d:7e:0c:04:81:4d:8f:fd:0d:e7:bd:e6:30:ec:c6:54:2d:
9d:ee:b4:1e:4c:ee:4c:a7:a5:a6:72:c3:2b:fb:5a:cc:f3:e1:
bd:3a:8f:09:c6:24:b1:ad:ad:bd:5e:f8:17:9c:2c:e9:fa:3f:
ab:6d:f0:47:5e:4b:88:30:8a:b1:41:02:18:ed:ce:25:97:1a:
0c:d8:d6:7c:8d:74:a5:ba:2c:4f:86:61:a9:01:f3:21:4a:f2:
c2:e5:82:1d:d1:ce:2b:ed:23:bb:0f:5f:ff:be:b9:a7:1f:42:
ec:f6:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:04:57 2025 by rpki-client