Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4e0c21a-d621-3af8-912b-3fbc4bcd9aa4.roa
File: a4e0c21a-d621-3af8-912b-3fbc4bcd9aa4.roa (raw, json)
Hash identifier: fgNUH5v++u7RMhAkcIQG9ct1lMB0T1N7nphQwJNhaw4=
Subject key identifier: FD:9F:71:F0:F4:CA:85:D5:B4:06:E4:E6:12:F7:F4:A9:AE:E9:F3:3A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A18474364A34F72BF6B7380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4e0c21a-d621-3af8-912b-3fbc4bcd9aa4.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.220.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:47:43:64:a3:4f:72:bf:6b:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d57eca91-c196-4fe7-b9b6-4bf7089c1e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:51:21:41:b5:aa:f6:16:9c:c9:24:85:69:
ab:49:2c:20:73:19:45:75:a8:e9:ab:37:b5:46:07:
d3:34:f5:f2:9c:e7:95:ae:4b:3e:65:e3:98:22:49:
4c:70:5a:fa:ae:ae:2a:bc:a3:fc:52:70:11:ff:af:
cb:e7:97:0e:02:5c:63:2f:a8:d7:a7:f8:48:03:e1:
5b:fe:2b:9f:70:a6:57:fd:b0:c7:8f:a2:92:90:cf:
9f:9e:cf:e9:ad:98:cb:03:f6:24:c3:cb:00:2f:e6:
8a:3a:1f:40:3d:3a:54:b6:b3:e8:96:8a:79:e3:ed:
6d:b8:d6:de:09:d8:9d:0f:3b:98:53:4e:61:42:ab:
6b:f1:fa:e5:b9:63:61:e9:a2:2f:03:5f:c4:b9:5b:
6d:09:9d:3b:99:81:96:37:cb:ff:85:00:af:13:64:
d4:69:19:e3:41:12:bd:fe:e6:b7:c2:d3:32:8e:2a:
80:92:e6:2b:7e:41:c0:21:16:74:d2:6c:17:05:ce:
36:38:cf:1f:2c:c1:50:8b:bc:f6:fd:88:21:2f:4f:
25:70:a6:9d:96:8f:dc:40:1f:57:a3:da:ee:84:b8:
25:0e:87:86:e4:dc:21:84:09:aa:f8:9e:ac:71:54:
5c:36:77:6f:83:f9:7d:bc:7a:1f:90:85:b0:53:bf:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:71:F0:F4:CA:85:D5:B4:06:E4:E6:12:F7:F4:A9:AE:E9:F3:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4e0c21a-d621-3af8-912b-3fbc4bcd9aa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.220.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:6d:c1:d9:f8:8b:5c:dc:b7:ac:76:cf:f5:32:af:f3:b1:f7:
f9:ad:42:f4:c4:e8:c5:e6:37:65:4a:b1:84:c3:f5:b2:9b:90:
6a:d1:b7:26:88:e0:4f:84:5b:d3:6b:d5:0d:71:7b:dd:d9:b2:
ed:2c:6d:42:61:67:8c:78:4e:c1:ba:89:14:a0:33:4a:3d:2f:
e3:c8:a7:c1:4c:99:60:1b:d2:57:cd:57:fb:d2:10:e3:10:78:
b0:05:8f:bf:67:30:bc:55:10:9f:1f:c9:e2:69:d6:f5:19:1d:
65:0e:ae:3b:bc:00:ef:d3:00:25:ae:86:1d:6b:bb:75:15:82:
45:9d:60:be:f0:0e:4b:0a:56:5f:ef:3f:67:0b:b5:05:1b:f2:
a0:5f:24:75:54:cc:19:5e:f6:d6:ec:02:c8:2b:74:56:da:86:
f3:46:f7:6e:05:ee:45:3d:99:d2:3b:15:98:74:99:b5:48:bb:
b8:69:a1:8f:76:ad:02:8b:8c:f2:9f:d6:9e:a1:41:92:c7:ab:
29:b1:44:6b:ac:95:45:ee:ae:3e:aa:5d:2c:2a:1b:39:ce:3e:
2e:5c:59:c2:76:8c:0c:15:2e:bd:04:8f:e2:c2:37:ea:f3:2a:
4c:62:66:af:85:44:64:48:0b:ea:68:f5:f9:92:10:04:52:a5:
81:6e:2f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:45 2025 by rpki-client