Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da42dc4c-9924-3d88-af8a-81552f17258e.roa
File: da42dc4c-9924-3d88-af8a-81552f17258e.roa (raw, json)
Hash identifier: Ti2/4VnE8L49ZAOHpbwycvH2x6qEP4JL9n4oPBKzVOw=
Subject key identifier: 63:BE:76:0F:E1:7A:3B:5A:BF:3F:ED:29:5D:24:AF:3F:C1:26:2E:35
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A7CFFA362E350D912AC160
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da42dc4c-9924-3d88-af8a-81552f17258e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.200.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a7:cf:fa:36:2e:35:0d:91:2a:c1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=32abbb65-f7b0-4890-9a3f-f04277dec684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:0f:c6:b8:cc:4f:27:74:9d:87:15:d7:94:
59:44:21:12:2d:53:17:01:18:05:97:43:9f:e9:09:
1c:55:f1:a5:34:12:03:28:75:dc:97:16:e3:4f:72:
65:1f:89:6e:f1:4b:95:2a:d6:02:b5:52:dd:26:dc:
33:09:b0:41:18:fb:e0:c1:e8:c2:2d:71:d6:ce:53:
a4:31:49:b3:21:32:bc:bf:8f:8f:5b:04:7a:d3:4e:
01:89:7f:6d:82:f9:30:56:5f:f3:0b:8b:65:aa:72:
41:78:a9:11:50:63:f3:99:04:f1:8c:27:7d:cc:5b:
89:6f:f6:57:6b:db:5a:68:1d:b8:28:21:fb:5b:c4:
c3:19:b1:27:97:c8:4e:f4:2f:8c:c1:31:7c:f1:a6:
4c:16:07:1c:a6:14:14:9e:82:34:5a:0a:3d:09:59:
07:b6:28:22:d9:68:e7:ea:bc:21:7d:52:10:54:67:
37:5c:5e:08:e0:8d:9c:d0:d4:61:97:54:c9:75:95:
c1:ff:86:37:6e:01:b0:9f:a6:a4:8b:29:4a:a4:2c:
4b:eb:e4:a7:a1:48:06:7c:de:6f:8b:dc:fd:f7:e9:
a7:d6:d3:17:39:22:6b:35:f0:d6:71:39:94:28:74:
56:1b:15:39:3f:27:1d:d3:a3:91:b2:bf:0b:19:02:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:76:0F:E1:7A:3B:5A:BF:3F:ED:29:5D:24:AF:3F:C1:26:2E:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da42dc4c-9924-3d88-af8a-81552f17258e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.200.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:a5:a4:a5:25:c8:da:db:41:f6:eb:94:29:2d:8d:7a:72:01:
d0:b3:77:51:b1:2c:7e:6a:57:fe:bc:00:be:6e:e1:50:03:06:
83:48:e0:05:17:88:90:e5:57:e5:e5:6d:5f:73:45:b8:34:1c:
7e:52:31:dc:f1:9f:9f:db:f6:97:68:1c:71:42:05:d3:81:c8:
10:77:44:2e:ae:23:c1:ba:db:d3:81:10:36:64:6f:b7:9d:02:
99:9f:15:76:48:4d:9f:1c:5a:08:8d:ef:c3:9c:f6:24:f7:b7:
e0:98:50:13:4e:b9:f3:d8:b8:48:45:98:b9:34:40:06:f9:16:
12:85:b6:f1:fb:f5:76:7b:c5:72:20:a6:e4:7b:f2:2c:ef:9f:
c2:07:5e:c0:df:34:8e:e3:27:c9:ac:a1:0c:ab:bd:c9:48:b3:
c8:39:80:01:ae:33:cc:3e:a6:f6:85:b5:21:9f:fc:34:60:61:
05:46:43:58:df:94:db:f7:4c:1f:51:3e:8f:82:e9:33:1d:9c:
2b:3d:f1:9f:72:5e:0f:81:44:81:ae:40:fe:54:5c:c6:cc:96:
00:ad:c0:a6:9e:5f:30:9d:5e:27:31:32:d1:db:54:a7:67:68:
3b:cc:e5:47:d7:0b:02:e7:2e:27:d0:44:1f:1a:a4:d9:a6:82:
df:76:e8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:25 2025 by rpki-client