Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a70f3d3c-c340-3f18-ad78-5fc8c80092f7.roa
File: a70f3d3c-c340-3f18-ad78-5fc8c80092f7.roa (raw, json)
Hash identifier: UpU3LSGmtFrR1IM5oTMJyusmFuB7uDg2BHmlSM2k44g=
Subject key identifier: 52:68:6E:F7:CD:D0:7E:80:AC:50:8A:82:02:BD:79:B1:2F:41:8B:1D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C1DC45997A4ED4F1793C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a70f3d3c-c340-3f18-ad78-5fc8c80092f7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.187.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:dc:45:99:7a:4e:d4:f1:79:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=ce16b8a4-d1c6-4bcd-8e67-1977417a66c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:36:84:82:5b:de:89:c1:39:0c:cb:bb:98:
6d:76:c1:1e:b4:75:2a:ea:34:6f:65:f1:e1:51:7f:
6a:8e:4c:ef:7b:36:53:89:09:60:c9:79:72:4d:95:
86:2e:46:86:9d:5c:4c:63:a1:23:32:52:08:8a:24:
e6:97:99:58:3a:9b:f8:7a:f2:f8:bf:65:96:ab:ac:
69:f3:dc:87:92:a7:77:1c:b2:68:9c:3e:5b:3e:40:
04:3e:d2:5c:e0:e2:39:1f:f1:9a:98:85:7b:49:92:
16:b1:a7:e4:95:a2:ed:aa:09:20:6a:28:84:3b:cc:
34:c9:55:e3:49:c9:22:fe:85:c2:8e:70:87:e2:78:
de:f5:01:5c:3b:af:39:eb:42:54:26:52:44:54:4e:
2a:87:05:fd:3c:a9:ef:10:e4:e4:9c:fb:fe:78:b1:
0e:0b:f0:16:96:d9:28:d1:72:6b:1e:00:fb:a0:d6:
bf:73:a2:bd:ac:ed:9a:b7:dd:26:03:b1:51:2a:c6:
0e:91:72:05:ef:9b:69:38:13:96:fa:8e:8d:95:46:
3c:16:9b:1c:56:28:94:6d:8b:08:ee:b2:be:46:6c:
ba:f0:7a:53:0c:f0:44:db:15:20:24:58:d2:c8:22:
b9:7d:be:fe:d5:b0:12:d4:d6:98:f1:0d:1e:5a:96:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:68:6E:F7:CD:D0:7E:80:AC:50:8A:82:02:BD:79:B1:2F:41:8B:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a70f3d3c-c340-3f18-ad78-5fc8c80092f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.187.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a6:f8:da:97:6c:11:77:62:52:23:a8:0a:1d:0c:ff:bb:0f:
ee:ea:ee:40:a4:7c:28:77:9c:7d:e5:fd:40:f7:29:59:6d:d0:
f6:32:f0:b8:e6:b0:51:4d:26:f4:ad:12:32:ae:be:b3:1d:d4:
a6:b9:b0:b0:3e:92:cc:b0:4f:de:55:9e:7a:6e:f0:63:3e:62:
c9:df:80:6d:a8:a9:c2:d2:77:86:35:6a:04:23:06:c8:47:84:
88:9f:1f:d4:ec:2d:fd:e0:25:e9:29:59:ae:18:29:f0:3d:66:
b3:f6:da:66:ae:3a:5c:35:09:19:7d:60:c2:db:39:68:56:06:
7a:72:7f:77:54:31:d8:e8:46:fa:41:a7:43:84:ab:41:9d:90:
bb:1d:98:a9:d3:43:1c:65:67:4a:7e:41:c5:3e:7e:36:79:c5:
f1:9d:d7:e1:4a:d5:3f:77:62:e0:79:33:cc:4e:5c:a3:ee:88:
f0:12:5e:6a:d0:9f:3f:8b:0d:6b:30:c7:d9:ab:7e:88:ed:4f:
da:93:40:73:0d:65:11:7d:be:a9:e3:06:c8:8d:1b:b4:a9:b0:
75:45:d5:09:a7:03:53:c9:a3:e2:ec:2c:2a:f6:6a:54:c1:66:
60:04:9d:a2:2a:5c:79:54:ba:35:d8:bd:c7:78:9a:5e:e0:f0:
63:8a:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:23 2025 by rpki-client