Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81ca517e-5288-3921-b677-1b98eca8efdc.roa
File: 81ca517e-5288-3921-b677-1b98eca8efdc.roa (raw, json)
Hash identifier: 3dJEM8TeRo55Og0ILPnRVnSsRiy+8kA3OSuUxBIUwus=
Subject key identifier: 01:14:AD:8E:A9:C9:1A:C8:72:C5:48:4D:A5:53:D9:0B:DA:A6:E0:0F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F10DFC840FB2A02E5E3280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81ca517e-5288-3921-b677-1b98eca8efdc.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f1:0d:fc:84:0f:b2:a0:2e:5e:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e35e9b28-0c40-4889-a165-6ea5c360b8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:64:d6:5f:b7:18:39:22:bb:ea:60:5e:83:
82:9d:c6:d8:b9:f8:99:1a:29:ba:0c:70:c1:8d:4c:
d6:0b:89:15:11:11:33:ad:3f:52:74:c9:82:f4:aa:
7e:8d:96:fa:99:e4:53:6b:87:e4:ab:24:c5:b9:40:
1d:9b:1c:a9:1e:e6:91:bd:4a:30:01:5d:58:a7:fb:
2a:d7:e2:84:c0:a9:a7:f8:e2:cc:1a:5c:e1:9e:43:
e8:6b:d0:1f:fc:0b:58:5c:06:34:35:95:54:f9:10:
c4:26:00:25:e9:cd:10:54:4e:5b:40:f4:14:54:b1:
4e:67:9a:c6:a5:ca:5b:40:68:e2:f2:47:83:d0:65:
41:c1:38:e4:de:07:c0:3a:77:29:1e:58:1b:ff:71:
48:8c:45:3e:7b:76:fe:f6:f3:93:9c:b2:d5:c0:c0:
2d:08:9f:fa:49:01:a9:37:0d:bb:cd:de:4e:55:e5:
eb:1e:d5:46:e8:9c:bb:da:22:3c:95:c7:07:f2:76:
a0:98:f2:58:f4:c3:b6:d3:9f:f6:72:40:e8:ab:6b:
33:16:e7:f7:7d:a3:0a:de:8d:a8:de:be:d8:0f:44:
1b:d6:4d:50:86:43:f2:d7:30:13:b7:52:ea:07:c6:
33:b5:21:76:f2:06:cf:36:64:1c:f7:15:48:94:eb:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:AD:8E:A9:C9:1A:C8:72:C5:48:4D:A5:53:D9:0B:DA:A6:E0:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81ca517e-5288-3921-b677-1b98eca8efdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:5c:6f:eb:18:a9:05:9e:1b:10:64:89:60:79:ab:3a:f4:3c:
e5:cc:dd:1c:89:21:fe:25:1a:5e:d2:7e:77:5b:09:12:da:0a:
12:76:0e:f2:04:99:68:ef:d0:00:ce:81:22:6f:2a:eb:91:19:
3e:56:20:b8:01:07:fc:5b:68:af:b4:fc:01:b0:6d:c3:5b:1c:
a2:da:2c:ba:ac:77:b1:97:60:2a:b3:8f:d9:03:cc:30:40:1d:
08:c2:2c:91:d5:81:96:3b:ad:00:36:92:11:b6:5e:56:2d:06:
41:b7:c2:f4:4e:70:17:05:9b:eb:b8:07:b0:d1:2a:62:7c:d8:
f0:e9:87:d1:9d:10:3d:71:f7:06:e8:3d:18:70:71:40:d0:4d:
72:17:b2:9e:38:59:e1:ab:21:bb:56:d0:b6:86:4c:de:07:55:
24:c4:f3:ec:0f:2e:71:dd:13:08:cb:b0:01:00:85:2a:51:1f:
1d:8e:aa:ff:26:21:39:ea:b4:62:fa:3a:55:c9:ea:f0:fb:36:
45:98:77:57:27:c7:14:36:ac:e3:c2:b3:71:04:b1:df:58:2d:
9a:1e:a2:87:3f:7f:7d:32:43:d8:e5:ba:7c:a0:be:93:99:e1:
6d:cd:16:6a:cf:31:6f:ef:bd:40:4e:17:5c:97:d3:45:79:43:
1c:3f:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:20:02 2025 by rpki-client