Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1dfbc5c-a1ee-3ca9-87b3-c5d081824951.roa
File: c1dfbc5c-a1ee-3ca9-87b3-c5d081824951.roa (raw, json)
Hash identifier: U42Aovq0LBZFpnLEL8qTn6QaKbED02Sek91U0ere/i0=
Subject key identifier: AA:67:FB:EB:C8:11:B2:7A:25:5F:40:E0:EF:C4:38:E1:AC:49:91:8E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A7E834688770DF44137C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1dfbc5c-a1ee-3ca9-87b3-c5d081824951.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.186.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a7:e8:34:68:87:70:df:44:13:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3166372e-c2e5-47e0-9989-b1771ae4d167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:fa:7c:9a:bf:16:ea:3d:5e:15:ff:1a:b6:
09:96:13:3a:c7:0a:f2:34:76:43:d9:fd:8d:7f:4e:
25:01:16:dc:a8:9b:e4:49:02:a6:c4:4a:d9:9e:4d:
14:7e:e4:4b:b4:8e:0c:14:19:c1:60:d4:4a:bd:4b:
4f:6f:73:98:93:82:6a:c8:53:af:08:33:66:d0:02:
6a:5c:f2:7f:cf:4e:e1:eb:f8:3c:eb:27:0e:db:aa:
8e:b3:10:e2:68:4b:b4:08:70:81:2d:8b:d5:e8:ac:
b9:6b:22:c1:cc:9e:c4:f3:3e:5d:1c:df:dd:ff:47:
f5:e6:26:41:9b:65:12:a1:c4:a8:7d:b8:e5:d3:be:
81:29:7e:66:4e:a3:8c:b9:d6:73:10:57:49:16:03:
6c:16:3b:47:3f:88:eb:59:3c:bb:65:de:77:7e:5f:
fc:a4:4c:2a:03:60:8c:69:be:7d:14:19:a0:fe:1c:
5a:63:59:e5:84:11:1f:6d:ca:1e:1d:18:4e:9a:97:
f8:4f:c2:76:6a:de:3c:b2:b4:42:4e:37:ab:67:9a:
fd:32:5a:53:44:a5:7a:f8:c5:13:88:39:83:bb:c1:
3d:13:48:11:dc:c6:ca:99:b7:56:5e:95:87:8c:5a:
96:cb:df:41:af:c6:63:e3:d4:a5:5f:39:0c:b0:2c:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:67:FB:EB:C8:11:B2:7A:25:5F:40:E0:EF:C4:38:E1:AC:49:91:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1dfbc5c-a1ee-3ca9-87b3-c5d081824951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.186.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:00:4b:30:e2:38:a4:0d:18:1b:4c:dc:c8:36:5a:92:3d:53:
c7:42:c1:d7:f6:83:7b:58:a8:4a:45:f8:f3:91:b7:c7:23:f4:
95:11:c9:83:50:09:20:fb:fb:cb:33:90:04:07:e6:50:25:05:
e0:63:ee:68:d4:13:83:3d:40:48:68:c6:65:fd:de:28:d2:65:
9f:eb:b0:de:de:b6:12:c5:57:ea:04:99:23:be:36:8a:3d:8b:
72:0a:39:3e:78:df:58:21:a1:85:91:6a:9d:6b:cd:dc:78:ee:
18:ff:fa:3f:6e:5e:4a:e9:12:3c:54:1e:2b:41:3f:fb:55:7b:
43:10:64:b2:df:50:f5:80:46:c6:fc:4d:79:e0:6f:16:e9:26:
63:e6:43:4a:e2:fa:c0:b3:da:67:12:2d:7b:41:56:bb:39:86:
67:20:cb:b9:c7:5a:73:8e:4b:0f:47:08:78:39:72:3b:92:75:
ff:d5:dd:39:b5:af:9d:9d:97:72:9c:bd:49:87:1e:16:c5:0b:
d2:1f:2c:df:a5:94:7d:06:07:ad:53:03:19:6b:03:67:9f:7b:
12:71:7b:eb:5f:6b:35:9e:86:7a:d1:cc:30:88:a9:b4:f1:09:
10:26:3d:24:b8:72:b8:a7:48:d5:0c:27:b4:d6:c4:4f:6f:96:
59:fb:92:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:26:26 2025 by rpki-client