Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b450854f-d574-358e-a6be-09563562348c.roa
File: b450854f-d574-358e-a6be-09563562348c.roa (raw, json)
Hash identifier: 6lv2uSOVuZZU/l3fI8nvupRkaNiHTlLQmg7vx71pFnU=
Subject key identifier: DF:7F:20:DC:01:A0:38:9A:CB:E6:AB:43:13:B9:41:79:92:BA:80:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B711BBAC23380B989066E8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b450854f-d574-358e-a6be-09563562348c.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.202.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b7:11:bb:ac:23:38:0b:98:90:66:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3a89a963-d6ad-441b-8362-12ec4f419e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0f:93:63:fa:f9:c0:54:23:5f:92:59:66:84:
99:c2:65:ac:d2:0d:f1:ff:0d:39:d4:b6:07:43:3e:
f8:b3:62:25:25:1e:33:e1:ae:b8:43:a3:2e:13:7b:
c4:9d:b9:f6:64:59:ef:c3:d9:d2:2e:41:69:06:24:
da:c4:6b:44:13:bf:f6:a2:6b:84:bf:0a:56:59:f5:
00:58:8b:70:1c:bf:85:eb:6c:72:84:d9:81:f1:6e:
8a:c2:2a:72:67:27:e1:71:8b:96:48:91:b4:25:6f:
5b:0b:48:83:34:3a:33:ef:30:b2:8d:6b:34:35:70:
8b:63:42:3a:a4:8f:ed:5e:a1:e3:b2:2f:0a:59:4e:
ca:ad:7a:28:fd:75:0d:5f:87:d8:d4:97:c8:43:93:
37:8e:4d:f6:30:42:5f:ad:89:08:86:dd:7f:b0:de:
1e:d5:d1:ea:d1:ca:ea:6a:d7:39:52:86:d0:74:e7:
0e:87:0b:8c:d5:84:2e:98:1b:fa:1a:e2:e8:36:8a:
66:18:1a:be:39:90:3f:79:5d:1f:1d:ad:32:14:3f:
89:87:32:91:cb:f1:d5:5a:a6:ad:c3:c8:c3:49:d5:
f3:05:7b:28:6f:fe:7e:86:9b:75:49:69:a4:98:09:
4e:3b:9d:8a:a7:5c:e1:23:e5:ca:05:00:69:1e:05:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:20:DC:01:A0:38:9A:CB:E6:AB:43:13:B9:41:79:92:BA:80:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b450854f-d574-358e-a6be-09563562348c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.202.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c6:f0:10:f4:a2:c2:3a:6b:25:5a:c4:b7:1a:40:1e:47:83:
72:51:17:ec:74:2f:4f:ea:ad:b1:0b:a2:0c:f7:be:ea:40:6d:
33:96:d5:38:2a:2b:d1:8b:08:f3:c5:64:8d:84:2d:6f:9f:99:
8b:34:68:83:f7:0e:82:45:5f:8c:07:87:68:bb:ba:0e:3f:6c:
b5:f1:42:ea:f7:a2:7f:b4:75:69:8e:6d:74:0e:64:89:28:7e:
80:eb:c2:84:b8:18:16:61:be:14:fc:fb:8d:78:cf:68:c2:3f:
58:4d:a1:7e:da:1f:db:d9:99:84:b7:8b:a9:ac:14:b1:74:d4:
18:4c:a4:c2:94:13:f4:e3:d6:79:42:74:60:26:66:48:cd:78:
50:09:ad:17:ec:15:b3:61:11:d3:d6:2e:57:ad:68:bf:6b:3d:
7f:fc:c7:52:9c:23:ba:03:6d:fa:1e:a7:a2:a5:84:17:ed:6f:
49:53:95:a3:ca:49:84:e9:66:7f:07:a6:a8:ef:60:13:e5:20:
98:62:78:69:a8:c7:f6:41:41:6e:53:ab:91:06:5b:ef:bf:d7:
18:47:7e:39:26:5e:22:b7:ad:f0:50:2d:3f:0e:96:45:48:77:
3f:1f:3a:60:3c:be:09:ae:91:7d:49:bd:b6:cd:04:d4:ba:c2:
a2:68:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:01:34 2025 by rpki-client