Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9bcc18d7-90b7-3f9e-b492-5fb877e59edc.roa
File: 9bcc18d7-90b7-3f9e-b492-5fb877e59edc.roa (raw, json)
Hash identifier: HjO8pcTmDKlc9kQik1XXP+5e+08lw9Onp7NWgLLQIk4=
Subject key identifier: D1:44:0D:BD:D8:D5:EA:12:36:11:DD:34:F1:9A:60:C0:FE:AD:88:99
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A65E972D3A3C5F1070D440
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9bcc18d7-90b7-3f9e-b492-5fb877e59edc.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:5e:97:2d:3a:3c:5f:10:70:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f6b2ea70-647a-48bb-9c9d-7fd5e0d2dc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:0b:7e:4c:b9:ba:59:d0:21:6d:fd:86:78:
df:19:26:a7:2c:10:7a:34:de:ec:59:58:fe:08:e5:
ee:27:7a:ba:1c:db:dd:2f:54:46:8c:68:e4:41:eb:
2e:aa:ac:2b:b0:a6:3c:2f:2c:6b:2f:90:4e:cd:bb:
ec:f1:bd:87:fc:68:08:56:54:90:0e:ae:2f:12:e9:
8c:82:43:41:b5:a6:5c:a0:dd:ce:5a:fd:7b:b0:b9:
2e:7c:53:95:35:d4:48:72:5e:1b:a3:5a:af:6c:fe:
4f:f7:7c:6e:9b:36:77:63:c9:78:52:89:87:be:f4:
cc:24:2b:1b:12:af:47:b9:76:6f:3d:d4:fb:44:36:
9f:cc:d5:26:dd:06:f8:af:76:aa:dd:e4:aa:6e:04:
a1:86:a1:85:64:fe:44:ba:13:4c:cc:51:16:cb:c3:
3f:f1:b6:75:68:d3:e3:79:d9:08:8b:a1:fb:1b:9e:
7d:7d:7d:ff:29:9d:5d:54:bc:1b:b2:d6:36:e0:09:
4b:da:c1:bb:82:d1:a4:48:38:fe:84:b7:87:99:42:
13:8e:ae:6c:42:9e:a0:e3:f0:50:43:8a:45:36:5d:
13:bb:a9:57:bf:22:1d:67:f5:6a:6b:b6:1b:38:5e:
98:7b:7f:2e:41:b8:88:91:24:27:47:f0:e1:64:2f:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:44:0D:BD:D8:D5:EA:12:36:11:DD:34:F1:9A:60:C0:FE:AD:88:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9bcc18d7-90b7-3f9e-b492-5fb877e59edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:69:74:fd:98:a1:71:3a:15:7c:50:5c:8b:dc:d6:52:25:c9:
9a:f0:bf:c7:4d:cc:b2:04:e8:5b:12:f9:0e:89:0f:76:00:df:
51:5b:7f:7d:50:19:49:c6:15:1c:21:a4:69:10:1f:9d:da:e9:
c2:29:0b:fa:e1:1c:fc:1a:38:ec:88:79:2c:43:fa:f5:5c:3b:
06:fc:d0:2b:6a:65:a5:92:f8:b9:9c:cd:67:0d:82:ee:f4:92:
58:25:bf:ab:b9:a7:44:ec:60:05:75:e9:30:46:7b:4f:fd:f5:
46:9f:f6:06:93:03:c8:68:2e:da:7c:f6:fd:bb:a7:1d:20:4f:
2c:5a:bd:fe:85:2c:e3:6e:4a:74:ff:64:87:e5:6e:8c:64:49:
e4:72:6d:2e:ad:7c:71:de:a0:66:02:37:9e:f8:25:40:16:6e:
8e:e6:3f:d4:8c:b7:79:12:c0:b5:b8:32:0b:35:06:cd:a6:4f:
e2:21:14:c8:da:0d:34:d2:9a:e5:d5:a5:a5:47:a5:70:4b:9f:
a4:d7:20:a4:17:7e:cd:c7:f3:a6:1e:23:8b:07:8d:a9:06:2e:
7b:27:f7:2d:ea:69:22:8b:29:9f:ca:fe:93:bf:61:e2:1c:bc:
34:4e:9b:da:41:9a:27:5f:53:c6:d7:61:c0:8a:c7:29:15:9d:
5c:f6:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:52:11 2025 by rpki-client