Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfd1d6f7-8606-39ed-9495-1e07d5fdd367.roa
File: dfd1d6f7-8606-39ed-9495-1e07d5fdd367.roa (raw, json)
Hash identifier: rV9aTvBJvpeYnLJOUXBDtA1RyWpvk539mFgng1k3dpI=
Subject key identifier: A0:D5:E8:68:AB:CD:A5:68:77:B2:3B:8D:E2:C1:48:3D:D5:7D:23:FC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1B577D23FACD5FC823CB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfd1d6f7-8606-39ed-9495-1e07d5fdd367.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.221.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:57:7d:23:fa:cd:5f:c8:23:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5e6d2c89-926e-4f7b-a23f-54212bca4803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:37:c8:14:70:20:88:e2:2f:39:01:82:df:
fa:c3:2e:b0:97:62:91:f0:42:33:b8:07:44:a9:19:
d5:e7:03:05:01:c7:b2:8e:b1:13:87:45:2f:28:68:
71:55:7b:28:6c:72:2b:dd:ac:03:e0:14:49:8b:8f:
c9:4c:6b:8e:dc:ca:09:33:8f:e9:c7:b7:2e:8d:69:
d6:12:cc:af:16:45:56:b7:dc:a1:57:06:00:96:eb:
7f:9b:41:39:e4:e0:24:fd:17:94:6e:4d:2a:58:50:
eb:31:4f:60:4a:14:90:d1:1f:4b:5c:81:58:92:0a:
e3:87:0d:0b:a5:d9:72:ea:e7:8d:ce:5b:20:56:88:
e0:07:7e:6e:7a:f8:66:ca:ad:8b:2d:72:ad:cc:5a:
9b:c5:5c:b5:ee:87:e0:8d:a0:6f:c9:80:7c:b0:45:
8c:44:b4:ff:15:89:00:c4:e3:f5:4b:55:4b:47:60:
ad:bc:27:27:38:73:6c:82:be:93:d3:2c:71:39:fe:
1b:86:40:25:23:d8:6e:92:49:f2:e0:f9:5b:36:a9:
b2:57:57:8f:ae:5c:67:89:b7:8c:33:1d:40:ae:fd:
45:7a:3f:78:3d:88:fe:a3:00:3a:cc:47:58:0d:b0:
c7:41:a4:d0:f9:16:02:11:de:38:4b:2d:10:b9:92:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D5:E8:68:AB:CD:A5:68:77:B2:3B:8D:E2:C1:48:3D:D5:7D:23:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfd1d6f7-8606-39ed-9495-1e07d5fdd367.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.221.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:8a:bd:34:ac:96:f2:aa:57:09:c4:36:ac:d1:d9:36:d6:7d:
94:0c:14:05:cb:76:b3:59:3b:ce:95:88:df:ec:9b:54:c6:0a:
4f:d4:9d:e6:ba:f9:d2:2d:21:b4:b5:da:b5:e9:cc:56:14:98:
0f:f4:61:a7:d8:94:25:b4:05:51:e6:64:f9:54:df:4c:fd:bf:
a3:0c:e0:03:16:c9:56:60:32:6f:1e:9d:fc:a0:65:e7:65:e1:
83:dc:e9:23:09:aa:f6:93:9d:b4:87:7a:f5:b2:42:c7:67:bf:
a9:3e:b2:16:fe:2e:12:4f:f2:9d:3c:d9:d4:47:54:97:48:b8:
93:c0:84:6d:33:7d:07:05:d3:5a:d1:9f:d5:20:3a:70:db:43:
af:c2:d0:54:e8:55:7f:21:57:14:63:8d:b3:b1:63:4b:0b:8f:
77:9f:04:15:e6:d1:64:a7:08:1b:73:59:80:39:9a:b2:93:ea:
92:54:92:a4:c8:2a:46:83:43:1a:94:12:71:d2:4d:5d:f7:84:
21:1d:db:51:60:6e:9a:89:33:ed:95:bc:89:71:58:dc:f5:da:
42:e7:80:38:35:90:94:b2:c1:63:3f:2d:15:73:82:9b:15:7b:
50:ad:92:ef:99:c7:f7:ad:df:91:65:f3:19:9b:0c:82:58:3e:
bb:16:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:20:49 2025 by rpki-client