Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88308870-adea-3b7a-b30c-97f4e1e0aa87.roa
File: 88308870-adea-3b7a-b30c-97f4e1e0aa87.roa (raw, json)
Hash identifier: 0uBC3UxNUirM2BujaBxbY4PiDsUcv53wceY7QkssvrA=
Subject key identifier: A3:0B:77:84:BE:67:53:6E:2C:6E:5B:9A:78:F9:DA:08:55:CD:25:7F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B2BCE03D963467D878C920
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88308870-adea-3b7a-b30c-97f4e1e0aa87.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 35.216.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:bc:e0:3d:96:34:67:d8:78:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f33cc0a1-d791-4d91-8581-7861c2bb7292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:59:2e:86:90:7f:b8:70:01:58:66:0d:33:
0b:ca:95:4b:37:46:ad:49:30:56:86:1c:0d:4e:62:
86:9f:33:51:09:37:01:6d:99:83:aa:b7:1a:68:11:
bd:a9:43:dc:95:bc:42:3f:39:ab:f2:09:6a:43:df:
71:1e:31:16:97:1c:ff:61:3a:d8:24:48:cf:7b:19:
2b:bb:e9:b4:8d:49:72:2c:aa:cb:63:e7:07:bd:8e:
32:54:68:d2:4c:79:55:ad:5e:90:74:d9:ca:3c:20:
d0:a6:a3:9c:b7:b6:66:68:bc:a1:c8:07:a4:87:88:
9c:53:ed:77:fe:de:47:99:0d:1e:8b:2a:93:1c:0b:
99:15:45:ab:fb:f1:73:d3:7f:24:8f:79:1f:a7:7e:
3a:76:17:05:b4:1b:c4:af:62:22:1f:c9:e0:0e:a6:
b5:cc:04:76:02:33:a6:80:66:5d:bb:28:9f:f1:7c:
4c:cc:b7:e0:4e:31:b3:ed:73:71:52:cb:54:2c:d3:
a1:01:d5:96:0c:79:d7:ea:d5:1a:b0:36:ca:2b:0e:
06:05:31:ec:7d:11:2c:bb:98:b9:57:a0:cd:12:37:
5e:dd:1f:f4:e0:01:6d:f1:cf:35:1f:ca:57:ab:9e:
dc:26:3c:8b:e9:c2:6d:fd:a3:08:06:e8:25:53:74:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0B:77:84:BE:67:53:6E:2C:6E:5B:9A:78:F9:DA:08:55:CD:25:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88308870-adea-3b7a-b30c-97f4e1e0aa87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.216.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:0c:c7:ff:9f:fb:09:b9:ff:cf:24:e0:90:60:13:23:9b:48:
dc:91:34:1c:a3:d6:cb:17:47:ae:a9:f2:bc:d7:1a:c6:2a:6d:
6a:9e:83:60:dc:50:d9:0a:19:5c:c2:c6:4a:fe:27:9a:0a:c0:
f5:8d:db:0a:3d:cc:fe:6c:85:0e:04:b6:cf:3f:41:b2:d1:98:
e8:d1:9d:ea:30:f1:39:fe:93:93:2a:0b:e7:cd:34:5d:32:10:
52:ad:82:2b:b6:99:8c:64:50:9a:09:a7:58:f3:2a:6a:8f:b2:
22:6f:7e:be:33:07:bd:7a:51:9d:26:2f:0e:f0:69:37:b1:cf:
48:66:6f:2d:4c:d7:0e:3f:67:94:bc:99:54:6a:c3:7b:fd:bf:
4a:be:0a:59:49:7e:31:55:19:87:10:44:64:e4:8a:30:a0:6a:
4c:27:23:e4:3b:4a:3e:ff:3a:80:a5:1e:99:c2:a4:4c:69:eb:
37:0c:04:17:2d:67:06:2c:c5:de:72:9a:3d:ee:dd:ef:a2:16:
84:9a:ca:af:ce:6b:cf:27:19:bb:65:0e:2b:69:a1:b7:1d:79:
a6:4a:ce:fb:a3:e7:60:a1:eb:67:31:a7:a6:b6:18:ce:47:f0:
72:bd:35:ff:bd:62:07:9d:db:da:f7:ce:87:5f:13:27:7a:43:
d5:ad:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:37 2025 by rpki-client