Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc9cc645-adcc-3278-99ac-87172a264952.roa
File: bc9cc645-adcc-3278-99ac-87172a264952.roa (raw, json)
Hash identifier: MS9hM1REqwnU7AdF6784VJBaoTIjdW10yMx8JfRhz9s=
Subject key identifier: AF:2D:59:C4:D4:30:9E:54:6E:67:C3:BE:CC:CE:BB:E2:A1:0C:76:7D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A047446AE46AEFEA320DB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc9cc645-adcc-3278-99ac-87172a264952.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:74:46:ae:46:ae:fe:a3:20:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f98c4bfc-a04d-45f2-9cf7-f51d82508977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:f2:cb:f2:d2:b5:35:55:33:e2:46:6c:40:
c9:f8:ed:6f:9a:79:43:72:84:9e:08:84:0c:49:9a:
32:35:d5:f2:06:f6:8c:df:bd:53:e1:51:99:3d:fe:
8a:b3:6b:97:1f:a9:61:65:54:36:d7:5f:86:b2:54:
70:63:f4:be:eb:10:10:65:d3:12:4b:7e:e8:07:92:
e8:22:6e:8c:b2:64:ec:e4:04:8e:de:6e:0b:ca:19:
4c:63:4b:a5:89:bb:11:3d:31:4c:6d:e4:ea:62:2f:
77:05:10:5d:04:3b:ac:30:5c:47:6d:a1:48:95:cd:
48:fb:4b:55:b4:49:39:95:da:59:98:60:79:32:34:
6d:3e:0a:f3:95:05:b4:31:ab:4c:59:9e:ed:1b:27:
a4:ed:62:19:b8:31:3c:bb:a9:f6:87:72:72:ba:4b:
76:a0:00:3c:0d:33:8a:f3:8c:84:a6:c0:82:23:5f:
ce:c9:d0:13:50:4e:1f:21:3e:40:75:ec:0a:54:2f:
f0:fe:d0:29:d2:90:2c:f0:15:9c:2d:9d:0e:74:9f:
04:cc:b0:19:01:75:0d:60:14:15:00:cd:17:2d:0c:
cb:c8:43:e5:ec:50:60:22:57:c8:1c:36:7c:b6:5a:
68:a2:7b:88:32:03:1c:67:ee:4e:42:45:fc:f9:23:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2D:59:C4:D4:30:9E:54:6E:67:C3:BE:CC:CE:BB:E2:A1:0C:76:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc9cc645-adcc-3278-99ac-87172a264952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:42:e3:ac:23:12:2f:6b:a2:9a:08:32:6e:49:c3:70:5a:34:
5c:c7:97:b2:f6:a8:d0:1d:0b:4f:18:0d:31:62:61:5f:a7:09:
36:a8:15:ad:5d:31:04:3b:46:5b:ed:31:f1:7f:2d:6d:b8:25:
cc:5b:69:a4:f5:e8:7b:6b:f6:41:f0:ba:f1:a5:c9:c3:d0:ef:
32:a6:da:fc:bd:ac:72:c3:85:64:79:4d:5e:50:f5:3e:34:6e:
28:b7:1f:51:c3:5c:02:65:19:d7:77:fc:21:03:28:c4:f5:27:
f0:e0:b8:67:f3:4a:0b:d3:c5:de:3b:fe:01:13:af:cb:69:cd:
ad:bd:20:c2:8f:b6:bd:24:9b:73:09:0f:4a:0f:af:75:7e:d4:
59:fa:f1:37:79:0d:0b:f2:42:50:de:99:c6:a6:4e:66:4e:90:
a7:ff:4a:00:54:18:ed:48:50:f0:6c:3c:07:2a:bf:4c:83:54:
e7:cf:a9:b6:c9:75:87:b7:a4:1f:bc:e5:15:4a:d4:14:2f:0a:
fb:7a:5d:f4:bd:df:b9:fe:dd:79:b9:95:2c:19:6f:af:b9:86:
ac:b1:95:56:9a:9d:1c:a0:a6:72:b2:d1:ac:fb:6a:92:eb:4f:
80:0f:a9:96:db:42:37:f8:c8:f0:5c:4a:35:02:2d:6a:48:14:
9c:c5:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:50:58 2025 by rpki-client