Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc96505d-85bb-3e0e-a6f9-74a34fdc4ea5.roa
File: cc96505d-85bb-3e0e-a6f9-74a34fdc4ea5.roa (raw, json)
Hash identifier: PljXV7cmZKUqkEQDJUtPkZuPZNa//lI5D5/BX9noOYw=
Subject key identifier: 2C:84:62:87:02:BF:49:C9:B9:85:4C:11:10:21:09:FF:C6:F8:B7:92
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F5045D92D34DE9920EBC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc96505d-85bb-3e0e-a6f9-74a34fdc4ea5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f5:04:5d:92:d3:4d:e9:92:0e:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=689a5081-c95f-44b2-8d6f-4c87ec2d492c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:00:f6:d3:17:d9:de:87:3c:59:f3:fc:b8:
db:3b:aa:ea:5d:b6:38:99:8b:35:41:a5:b1:f9:9d:
d9:fd:07:a4:64:7b:38:2b:39:3a:40:72:55:9f:98:
f2:58:b5:80:2f:5c:4d:d0:3d:45:38:7c:4d:4f:1c:
3f:2d:c8:7b:2b:84:95:75:0f:a5:d4:2c:b2:6a:87:
52:1f:82:7c:7e:ff:41:36:c0:da:38:d9:e8:3d:2e:
1e:cc:17:a4:66:a2:02:8b:5f:94:90:32:11:e0:6c:
71:2f:a8:5a:b1:5d:ab:6d:4f:9d:92:d7:9c:8e:b1:
0b:17:ac:7d:3a:04:8a:9f:a9:08:12:b3:0d:1c:04:
7c:e1:88:09:36:ba:75:48:0f:97:c5:93:d0:b1:70:
61:19:7c:a2:6a:f7:d1:e3:6f:29:33:f0:6b:b9:80:
78:3a:b5:95:a8:0c:ed:8c:8a:3b:11:90:48:84:8d:
73:19:c3:83:cc:d1:99:8b:aa:28:22:49:32:c3:90:
b0:e3:47:71:71:71:29:7d:8b:e1:f8:9b:96:cb:c1:
8e:7a:9c:0a:a7:07:dc:4c:4b:17:38:b5:b2:33:73:
ee:96:e5:44:04:a1:34:21:7b:dd:e5:fc:90:bc:5d:
c0:a0:1d:47:2b:9f:b4:d9:56:b3:ef:71:85:89:74:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:84:62:87:02:BF:49:C9:B9:85:4C:11:10:21:09:FF:C6:F8:B7:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc96505d-85bb-3e0e-a6f9-74a34fdc4ea5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:5c:e4:b3:28:7a:94:8f:c3:8f:e6:e3:d2:fe:82:cb:5f:3e:
66:43:ef:7b:96:12:06:23:f7:ea:2f:35:48:5d:1a:f8:96:33:
6b:79:d5:a2:26:db:e2:a1:89:c5:fc:39:82:8c:6a:67:09:f6:
fe:2e:eb:a0:1c:64:25:1d:38:4a:6f:55:23:38:a8:c2:7f:06:
98:27:44:dd:8e:d4:b0:83:2c:34:61:79:db:8a:ae:17:3d:e7:
45:b4:67:2e:89:13:bf:81:9b:06:bc:a0:76:62:b3:2a:e0:a4:
a3:fd:74:15:d2:3d:9a:fb:de:42:ba:1f:8e:9e:27:84:e0:47:
c4:fe:51:23:7c:23:c9:1a:00:ec:fc:de:29:49:34:cc:c9:ca:
e3:7f:03:21:65:bf:d5:58:67:41:44:ac:0c:3d:66:85:a8:69:
ee:c2:0a:15:5c:d8:5b:f0:2a:de:42:8f:46:61:39:46:44:ed:
8a:24:ff:46:0e:e4:42:13:37:0d:19:4c:b3:d9:d4:00:a3:05:
b4:04:46:ac:6b:fa:29:a4:a3:99:bf:d0:2a:d2:f6:ec:35:05:
82:5a:28:a1:42:e9:71:8f:cb:7d:be:c8:05:f0:7b:4d:43:7d:
b3:9f:af:50:63:ae:7f:3a:20:42:5c:04:c5:d0:70:0e:62:66:
b5:d3:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:00:43 2025 by rpki-client