Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a7d32ca-348a-34dc-9507-238fabbd3631.roa
File: 8a7d32ca-348a-34dc-9507-238fabbd3631.roa (raw, json)
Hash identifier: tEA1aETRJwWa0DEY1zga1Cu3QXsodZCatVeir9KHXJ4=
Subject key identifier: 84:38:BC:DF:E3:49:B7:E9:EB:56:52:C0:6E:A2:00:0E:D9:79:A7:A8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B25D4EAE310402E4CDD920
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a7d32ca-348a-34dc-9507-238fabbd3631.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:5d:4e:ae:31:04:02:e4:cd:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=21c06e84-f90e-466e-94a7-940cf164f652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:39:67:c7:9c:d6:c7:49:e8:03:f5:5d:1b:16:
d6:ca:4b:38:e9:06:5c:b2:ab:ae:d9:2b:12:83:42:
2c:ca:d0:50:5e:8e:a3:41:28:11:2d:c0:73:a7:5c:
f7:65:88:8c:27:b7:b7:76:14:f5:43:16:95:b3:d4:
55:8e:16:71:cd:af:69:1a:dd:61:a0:9a:2c:fc:19:
e9:1b:b2:1c:8f:65:8e:a4:aa:d1:6f:77:a2:d9:37:
cf:86:0b:21:7b:85:04:8c:2d:61:33:3b:f4:52:8d:
ec:88:15:4c:f4:5a:4a:cf:29:15:69:4a:4c:05:46:
36:46:a3:6b:ec:14:fd:d4:4e:4e:46:de:4e:80:8c:
11:3d:76:35:dc:b6:4b:f8:88:f4:47:f3:0d:19:f0:
80:9d:d3:02:ba:72:ad:22:8f:74:63:6e:69:b5:8d:
42:ab:c0:9d:26:99:25:3d:71:e0:eb:e1:64:4e:37:
24:ed:b3:26:ce:9c:02:7d:76:a5:c1:66:3d:1f:b0:
4a:87:d8:d3:bc:34:49:8e:cf:53:b6:d7:c0:91:3e:
98:40:2b:c0:8e:83:0a:87:c6:35:83:e9:f8:2e:2c:
26:f4:ac:bb:7e:d8:a4:83:47:e9:ec:49:80:19:55:
5a:59:88:1d:b0:11:23:83:bf:02:37:35:57:4b:5b:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:BC:DF:E3:49:B7:E9:EB:56:52:C0:6E:A2:00:0E:D9:79:A7:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a7d32ca-348a-34dc-9507-238fabbd3631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c3:41:16:54:3b:46:60:9b:c8:1d:a3:e9:e2:96:28:95:33:
33:54:5f:72:aa:0f:aa:d0:27:36:50:8a:af:9a:15:74:c2:a3:
b3:a9:b3:db:0e:b1:35:74:cf:27:41:b8:b7:12:56:8d:e9:01:
df:59:2e:75:4e:d4:e1:bd:51:d4:94:d4:37:c3:94:11:4e:fb:
16:69:f4:ab:ea:77:4a:0d:44:06:e5:9e:37:89:8d:dd:52:54:
bd:98:70:20:34:77:1f:b2:ec:42:e5:40:77:2f:c6:14:51:91:
d0:ba:ff:9a:42:bd:43:a1:df:ff:22:13:c5:06:dc:29:34:a6:
56:38:10:24:46:7f:f6:88:7a:6a:19:19:c8:ea:20:ea:29:89:
1a:e8:5e:ef:7a:a3:98:c9:e5:a7:a5:83:66:5b:9f:35:9d:ae:
41:e7:9e:73:65:d9:7d:7e:ad:cb:5e:3f:b4:00:a6:e7:35:65:
1f:8b:dd:75:a4:0d:06:66:81:c1:6c:9e:c4:63:d0:76:e5:c7:
62:f9:1e:8e:53:61:0f:e9:f7:79:de:4a:c7:26:8f:6e:ec:93:
5d:70:7a:8f:ff:d0:70:2b:94:cd:08:e7:81:75:96:1b:fb:95:
09:d2:21:82:1e:4f:ef:d1:ff:2f:32:d6:f9:df:1c:6a:4d:1a:
54:8f:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:11:41 2025 by rpki-client