Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab626f84-f86d-33ec-a800-a07530efa060.roa
File: ab626f84-f86d-33ec-a800-a07530efa060.roa (raw, json)
Hash identifier: keY8ADF29WH1YvrLpk9s4H43heIx4SaKz1Y5xFWd3WA=
Subject key identifier: 97:0B:24:1B:81:50:FC:01:38:B9:EE:1A:D0:25:C3:AF:F9:8F:82:74
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1635DBFB1DDA78DA92C280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab626f84-f86d-33ec-a800-a07530efa060.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:35:db:fb:1d:da:78:da:92:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1f9fa6c3-7db8-49eb-b381-a555d15e3070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:84:91:3c:11:a3:32:87:5a:60:2c:b5:3c:
98:f7:92:fe:fe:43:76:7e:bf:08:95:9c:39:f0:a7:
05:c9:67:93:1a:97:76:7f:f9:8b:fb:a0:4b:22:55:
4f:55:bb:29:00:6b:e1:d4:d2:7f:69:72:87:6d:ca:
cb:eb:95:59:15:45:23:da:1a:65:ed:ba:8f:ce:3f:
a0:bd:11:71:00:48:2e:b7:ed:17:22:6e:83:2a:3e:
c3:f0:6e:30:d1:6d:9b:a5:69:e1:a3:3c:95:c0:c7:
b9:a2:0f:be:1a:7e:88:cf:fd:74:ad:7f:cf:f0:2f:
5b:ad:86:9b:e7:fd:91:b0:ce:da:7c:b9:ff:25:3a:
03:ea:39:30:ff:ae:12:bf:ff:28:ce:69:67:2d:90:
ff:d7:7f:99:0a:0b:88:5c:b0:45:f3:2c:18:d8:6a:
69:19:2e:9d:ee:86:e1:a2:97:ad:8a:9d:79:e9:a5:
9c:e6:c9:d6:7a:95:e9:ec:a7:58:d3:00:cc:24:76:
08:e6:fa:c7:15:5b:be:92:22:99:7b:ae:d5:68:ea:
8c:d4:48:39:a5:9c:cc:32:93:44:1d:98:4e:8f:6e:
4d:12:a2:0f:1f:0a:f1:89:b5:c2:b3:43:82:8c:ca:
48:ac:f0:52:77:ca:0a:04:e5:5b:1b:64:99:bd:7a:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0B:24:1B:81:50:FC:01:38:B9:EE:1A:D0:25:C3:AF:F9:8F:82:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab626f84-f86d-33ec-a800-a07530efa060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:04:94:d3:09:fb:63:86:21:2a:0c:3e:c2:9a:2a:dc:a6:00:
68:4f:7b:74:48:e5:56:3c:5b:0a:8a:af:1c:20:1b:75:29:d9:
fe:1a:42:64:dc:51:25:36:eb:66:9f:93:15:b0:7a:5e:fd:2b:
fe:99:42:94:f7:5e:3f:6d:40:e5:c2:90:5e:e6:45:70:fe:4d:
7a:7b:3b:77:37:bc:f8:b4:74:8a:d9:d5:de:4c:7f:32:15:40:
69:3b:75:ed:a9:fd:dd:f4:aa:f5:a3:64:5e:ea:f6:25:56:90:
7f:98:6f:08:95:f2:49:e0:f7:4f:b2:b2:a3:2f:54:cd:da:c9:
db:8a:3a:15:fc:1b:ef:7c:37:94:d3:c5:a6:08:0b:0f:5f:99:
ba:fb:60:54:f6:01:42:25:1e:c8:24:8c:fa:ad:03:53:06:2b:
f9:df:23:9e:a4:b0:f3:7f:85:5c:34:a0:0e:57:d2:a7:5e:b9:
01:8a:cc:eb:91:50:c6:12:c9:e2:1f:b7:71:7d:1a:85:4f:9d:
86:cb:e0:e1:ec:36:b9:c3:9b:d2:db:15:94:02:63:6d:7f:4e:
5e:28:12:76:48:d4:69:6e:84:c4:9b:0e:94:c0:77:99:90:ad:
33:f1:8c:54:20:2a:ec:ae:f4:64:36:07:1e:2f:16:c8:b2:0e:
3f:f9:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:48:30 2025 by rpki-client