Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba3095ae-8949-34b1-99ba-8a55d85b070a.roa
File: ba3095ae-8949-34b1-99ba-8a55d85b070a.roa (raw, json)
Hash identifier: AYxnS5RXJTwWHsM6mC1qYulv8PbL5K7ApRSEC8Axdio=
Subject key identifier: 8C:CF:F6:C3:43:CE:DE:1B:67:F4:D2:83:85:F7:4E:A0:95:BF:73:CA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C355590216A05DCC73B780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba3095ae-8949-34b1-99ba-8a55d85b070a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.201.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c3:55:59:02:16:a0:5d:cc:73:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=375a4352-4269-463d-a73b-49f4afc38426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:01:82:42:79:93:af:45:e9:29:18:c6:43:
d4:e2:6f:8d:b0:e0:a0:a0:50:4c:c8:f1:0a:55:4e:
dd:58:04:2f:8a:84:24:87:aa:1d:54:90:6b:54:57:
65:1f:d7:14:23:20:ea:93:2f:a5:f9:d0:a8:74:d1:
bf:83:e9:7f:90:e6:67:04:ea:e6:17:28:0f:64:bd:
2d:10:a1:f0:f3:10:c3:e6:70:e0:4d:ed:d0:22:8b:
90:85:66:30:33:8c:cd:0e:da:93:86:51:7f:31:78:
6b:3b:e0:f1:58:f5:8b:8a:3f:a3:98:c1:5e:b6:11:
52:c1:c3:44:cf:c3:3c:5b:3a:58:95:b3:92:12:91:
df:4b:1c:68:10:99:c6:98:7f:27:fc:cc:4d:e2:cc:
74:1b:0d:57:3e:6a:45:f6:57:78:e7:80:b6:d1:53:
1d:3d:ed:04:29:fb:63:e8:ac:71:8e:1d:9d:97:f9:
30:5d:87:55:f2:a6:d3:59:88:77:10:26:ce:a0:21:
2a:ce:b1:5e:19:72:3f:dd:1b:2e:6b:f2:4a:d0:6c:
49:93:b6:36:46:aa:f3:23:7d:fd:31:dc:d4:a7:d0:
76:3d:5f:55:ce:39:87:2a:6a:3b:c9:ef:ec:e6:de:
39:f4:11:00:87:c5:6c:07:5c:e3:c8:c0:cc:52:d8:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:F6:C3:43:CE:DE:1B:67:F4:D2:83:85:F7:4E:A0:95:BF:73:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba3095ae-8949-34b1-99ba-8a55d85b070a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.201.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:63:72:51:4b:ec:fb:d2:fd:a1:d5:e3:b4:1a:39:39:fd:81:
47:b9:df:d5:21:07:3e:df:39:38:5b:a7:09:52:d5:19:4e:4b:
d9:09:6c:a2:1b:46:ae:c3:5f:14:d2:1b:c3:57:5a:0e:a3:44:
57:78:ee:57:51:9b:c2:e0:c6:d9:04:75:73:b1:1e:30:4c:ec:
46:16:71:1e:32:16:c2:70:84:95:5c:64:73:03:e7:f6:ec:b2:
29:ae:5c:7e:30:ae:d0:01:3e:79:47:f4:e4:9e:01:b1:ed:32:
6d:03:78:fe:27:4f:ea:73:46:bc:be:10:22:2e:bc:ca:24:6f:
d1:84:55:44:fc:96:f8:6d:53:72:c8:b9:ee:2d:eb:33:1b:5f:
df:2b:29:f4:fe:4f:a5:fa:50:d2:6a:9b:10:52:5a:3b:c0:4d:
a9:da:b0:33:45:7e:fa:41:3b:31:82:17:e5:dc:67:e4:db:36:
44:f2:6b:b6:53:c7:23:32:ae:a3:2b:73:37:90:a3:11:97:84:
ea:1c:1b:91:7a:56:ac:82:10:2d:38:2e:b3:a7:b9:84:8b:e5:
6f:3b:0e:8d:8a:8a:96:e7:93:e5:40:91:fd:bf:b8:48:d0:72:
e9:75:02:fe:03:86:20:bb:8f:bd:55:85:a4:71:52:b9:9a:9b:
ed:ff:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:34:20 2025 by rpki-client