Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b09e5098-932d-391c-841e-47acf6487bd7.roa
File: b09e5098-932d-391c-841e-47acf6487bd7.roa (raw, json)
Hash identifier: 82LhhHOKvgh9WKq6KiHSnaqFU8KbzwwfK4VaSrkJfRc=
Subject key identifier: 05:AA:BD:AB:20:95:52:28:C5:53:1F:BE:95:27:F0:AD:99:90:89:08
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AEBAF5D9A41382764B2900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b09e5098-932d-391c-841e-47acf6487bd7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.194.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ae:ba:f5:d9:a4:13:82:76:4b:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=0ba0f7c3-b230-483c-876b-5b4d5fa70930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:28:af:f0:3d:5c:0c:27:68:ef:3b:43:4e:
87:7e:88:9d:bb:31:99:c7:b2:18:cf:f8:6f:3d:25:
03:b3:9b:6b:d7:c5:a1:90:b0:6c:82:1f:d9:8b:1e:
c7:20:cb:c1:10:ac:43:24:e3:18:f3:83:c9:2d:b6:
17:89:82:8f:2c:18:22:fe:ad:00:a7:b9:ed:3f:86:
1f:3e:32:e8:3b:71:ca:12:be:02:71:62:81:16:be:
3b:8d:ab:f5:75:0e:b0:ab:b0:dc:e6:98:90:e7:8d:
1f:8b:35:e0:7f:18:13:72:e0:23:f3:5f:b5:a2:e2:
ad:c8:db:57:97:e4:a9:08:6d:d4:24:12:63:6f:06:
2a:6a:38:8f:3e:60:8e:70:75:3c:c1:06:3f:2d:70:
ef:15:09:84:55:47:fb:25:68:9a:97:0b:db:12:06:
b9:e4:2b:13:81:00:fd:c3:24:f0:f4:f5:40:91:36:
52:b9:0a:59:d7:99:5a:e1:5f:16:f3:3a:e5:fc:3d:
c5:9f:ac:8e:1d:4d:f8:5d:01:b1:b1:fc:74:dc:c0:
30:bc:5c:e4:45:85:e8:18:5f:f7:a7:19:56:2d:ff:
74:f9:46:f0:fb:97:1a:c6:de:da:bd:84:58:ed:4f:
c9:5e:21:11:02:a5:fa:99:64:6f:67:ce:f6:e4:0a:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:BD:AB:20:95:52:28:C5:53:1F:BE:95:27:F0:AD:99:90:89:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b09e5098-932d-391c-841e-47acf6487bd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.194.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:a0:22:ff:6c:08:8c:61:61:c7:9d:04:60:4b:50:29:55:c2:
5a:dc:06:34:6a:1e:c6:4b:41:21:0b:11:f0:b0:d6:16:90:fa:
9f:7c:91:67:13:ba:cc:7d:b8:7a:eb:5f:d5:de:e0:88:46:40:
bd:a0:c4:88:60:e3:b3:e3:f8:97:39:d8:ae:ae:51:8e:2e:75:
8f:91:9b:2c:59:72:7d:54:06:b6:20:37:96:87:84:4b:77:7b:
2a:6d:ae:13:8d:c1:60:3a:e0:68:d0:6d:48:82:8a:ad:cc:05:
3c:82:bd:7c:3e:fc:1c:ba:0f:26:0d:64:3f:55:96:db:bb:dc:
ac:eb:c0:ac:73:aa:a8:ef:e2:07:1e:bb:2a:f9:17:7e:72:07:
7c:ef:e0:29:a2:62:62:15:6e:ef:67:ec:03:fc:9a:7b:50:67:
2a:c9:aa:1a:7f:31:71:73:d2:b8:b3:e2:0a:cb:59:80:5d:b3:
d3:e0:fd:3e:fc:85:c6:20:bb:a6:bb:97:99:f4:31:ed:d4:b8:
67:d6:02:9d:d8:04:d0:9e:0c:0c:e1:e9:df:7b:c4:a4:f0:f8:
39:cf:0b:aa:41:bd:0a:e6:9c:d2:3a:f5:64:41:76:18:ed:14:
10:58:0b:7b:e0:a5:fe:d2:e0:52:c0:3f:f6:f7:12:72:7b:eb:
76:97:e7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:33:55 2025 by rpki-client