Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5873c6-4f1a-3c64-ae22-3cdbe827f15c.roa
File: af5873c6-4f1a-3c64-ae22-3cdbe827f15c.roa (raw, json)
Hash identifier: LUAm8Zb7gzLjbc8R1I46wJ/ArVlS0rRVHMy0q2DNQf8=
Subject key identifier: 8C:03:A2:81:6C:37:B7:0D:78:0D:F9:93:69:F2:74:6D:A8:32:75:DD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EC08B9587A2F8C77249500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5873c6-4f1a-3c64-ae22-3cdbe827f15c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:08:b9:58:7a:2f:8c:77:24:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5932a240-2228-42eb-bfcd-9c8aa5f63f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:27:c6:e4:fb:60:af:48:3e:a3:90:f8:fd:
9d:62:31:9a:35:2a:47:5e:e4:fc:1e:a4:b4:ed:a4:
28:51:a4:24:57:91:b9:5d:f9:56:51:48:81:3a:2f:
dc:46:14:bf:c8:41:37:f1:a2:52:8b:91:9b:43:81:
8f:9e:f2:f5:2f:b2:ca:59:0b:87:c6:16:3e:b1:c2:
8b:7f:78:40:bd:d3:be:1d:d0:59:4d:f3:e0:6c:a9:
b7:02:04:d2:7b:69:68:f4:e2:3e:aa:a7:db:91:54:
2a:b3:41:86:f7:b6:43:c1:d5:bb:bd:51:1a:67:bb:
e9:9b:25:be:66:2a:ba:21:b3:5e:6c:0e:61:10:d0:
d4:f6:51:a1:fa:59:8b:2a:07:dc:13:17:8b:50:75:
c8:83:aa:f7:fd:04:7e:3b:cc:bb:32:5e:e8:4f:88:
fb:0a:0f:0d:87:fa:9f:00:c3:61:24:c1:65:98:af:
dc:8b:31:f7:dd:50:e7:72:a9:c7:fd:7a:fb:54:c8:
4a:e2:ce:d4:ef:a1:15:15:c6:60:61:e9:62:63:e6:
fb:91:9b:de:ec:3a:1f:aa:fd:91:17:c2:28:b5:3e:
bb:72:a2:55:c6:2f:7e:51:a5:22:b4:cd:13:35:fd:
81:1d:f5:c2:37:5e:b9:f2:71:3d:95:74:2f:3f:27:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:A2:81:6C:37:B7:0D:78:0D:F9:93:69:F2:74:6D:A8:32:75:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5873c6-4f1a-3c64-ae22-3cdbe827f15c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:00:73:e9:ba:7b:bd:ca:42:76:c2:74:e0:4a:d0:b0:75:50:
10:b3:17:17:64:1b:61:c8:e8:54:56:43:02:dd:1e:fd:42:8a:
8e:44:7f:c2:66:46:d6:b2:aa:90:d9:fb:98:5e:8b:d2:8e:24:
91:88:9d:d8:fd:5b:6c:8c:46:b1:e6:7f:4c:b2:d0:fc:e7:bc:
94:59:d9:53:c7:80:91:ae:e1:92:da:a3:64:dd:df:4b:4b:73:
12:92:03:57:1c:e9:b3:f0:e4:7a:24:7d:b3:11:af:2e:df:17:
d5:f8:1e:92:79:fb:73:fa:4c:36:66:7f:f2:d8:25:62:03:c7:
3d:f2:70:e8:77:04:54:01:fc:0e:36:84:c7:84:8a:dc:ef:74:
c8:a2:69:b3:c8:79:1f:1f:78:eb:b2:ae:14:62:f1:40:1c:5a:
ba:b6:60:a6:87:c3:7b:cf:85:56:67:dd:a7:39:70:47:09:f2:
fb:d8:59:d9:14:0f:82:89:d8:fc:46:ff:bf:43:e6:17:46:bb:
f8:35:63:c9:c2:df:b2:36:4e:fd:86:e0:49:9c:12:35:a3:97:
46:f3:3c:b0:39:35:8e:97:4e:36:e4:98:24:ab:a9:72:42:3b:
c5:68:d8:bc:b5:3e:e7:56:ee:fa:8d:9c:c9:c2:98:06:db:e7:
2f:19:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:36:50 2025 by rpki-client