Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab21a5e-19a8-3194-ac8e-b70260a229b8.roa
File: 8ab21a5e-19a8-3194-ac8e-b70260a229b8.roa (raw, json)
Hash identifier: +Bm5rDL6qEKCiF+4OAtLupwqOSalT1jZZLSo9H34w1Q=
Subject key identifier: 34:F4:16:80:7C:1D:B2:D6:3E:6A:63:C9:95:32:B9:B6:69:95:95:F1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BEFFF3DC692ECB038C3A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab21a5e-19a8-3194-ac8e-b70260a229b8.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 35.206.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:be:ff:f3:dc:69:2e:cb:03:8c:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d95bad41-10c1-4b5e-b360-1ffda5a30b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:c1:5d:72:78:29:dd:57:b1:4a:4f:d1:68:
ba:ef:e1:d4:d8:6c:87:bf:24:50:02:96:38:7a:3d:
b3:a1:4d:6a:22:2e:ed:ba:46:e7:d5:8f:19:48:00:
f6:d4:8a:2d:98:38:5a:ef:21:16:5b:b7:17:c3:d5:
d2:d0:6c:b5:90:37:bf:05:24:e8:67:04:fe:54:dc:
2b:8b:39:8a:b9:9d:b7:7d:04:5f:5a:56:62:d2:15:
13:b7:41:a2:98:c8:b0:7e:7d:5b:08:f5:2a:58:4d:
99:bf:e9:72:f1:71:4d:cc:5c:83:bf:e7:27:f5:b0:
2a:68:b4:4b:bf:4b:14:a1:0d:28:1f:27:0c:2b:fe:
3f:c3:1e:e9:f1:a9:a7:48:a6:5b:90:c6:e1:f4:00:
a0:f6:f8:ab:a7:b2:0a:46:6d:8a:28:f9:2e:64:d3:
b8:50:89:8e:6e:64:ac:e3:6c:d1:98:bc:5b:a7:55:
bd:d8:04:7c:35:f6:0d:98:2e:8a:06:0f:94:13:70:
1c:15:23:1f:3b:b3:19:d3:10:f6:38:36:0f:d2:f5:
41:23:ac:5a:bb:7b:dc:a9:d7:32:85:21:4a:d6:b4:
e4:13:76:0a:b1:f0:2d:f4:95:bc:b2:8f:e0:6f:73:
91:52:b5:80:83:ad:07:a4:e6:a4:e5:83:c7:b3:1d:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:16:80:7C:1D:B2:D6:3E:6A:63:C9:95:32:B9:B6:69:95:95:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab21a5e-19a8-3194-ac8e-b70260a229b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d4:0a:62:2f:ee:b8:f2:46:2e:00:e4:10:3f:67:92:e3:47:
76:1e:09:bc:30:01:f4:d4:30:db:9c:e9:75:81:2a:01:36:16:
eb:ac:16:18:45:c5:51:bf:8e:2f:4e:d3:8e:6f:05:d4:0a:71:
dc:12:c2:80:c0:f5:57:f5:04:ef:a2:ea:42:4d:95:72:cb:b4:
4c:9c:19:a5:ed:53:ab:15:b6:af:cb:79:8a:1e:f9:fe:e8:65:
12:c9:60:5f:17:42:46:79:b4:38:8b:90:b6:ca:68:0b:c0:26:
c7:0c:95:2d:fa:84:99:68:ad:03:31:4b:6e:ac:ea:97:49:d5:
17:5e:e6:6f:63:1c:01:0c:36:f5:e8:f4:de:94:9b:a7:71:25:
68:0d:61:eb:19:13:39:90:ae:2a:dc:ba:16:bb:d0:dd:89:aa:
0f:22:cd:23:f2:05:41:92:6f:6d:05:ca:a7:c8:c9:2b:89:7c:
00:05:98:2b:4a:f4:4a:cd:5a:f0:c6:ef:b7:05:5a:8b:8b:80:
49:a7:9d:d6:28:66:ce:b7:15:65:7f:90:10:b7:ad:3b:e6:64:
f5:32:b5:45:c3:3a:6a:c4:9d:7b:fe:90:0b:83:1f:41:3e:a8:
2e:d7:4e:56:d7:67:f9:97:67:94:13:93:cd:34:f2:c8:73:1e:
cc:74:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:08:28 2025 by rpki-client