Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfe9de26-c6e3-320b-af64-024e0c841a12.roa
File: dfe9de26-c6e3-320b-af64-024e0c841a12.roa (raw, json)
Hash identifier: wFa+YkGKUw5oWrda7LGHbbo/hqaL2Mr4Tax4h9GmWRY=
Subject key identifier: 79:26:AF:CD:C3:2C:E6:73:69:D5:58:3B:52:87:3D:B5:A3:ED:C8:EE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BC4A406F4C7A49D6154880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfe9de26-c6e3-320b-af64-024e0c841a12.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.247.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bc:4a:40:6f:4c:7a:49:d6:15:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c5b899a8-f9b3-464c-b3b6-c825019ea3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:e6:b1:91:36:de:a5:c1:3c:5a:01:0b:ca:
18:08:b6:b0:5a:2d:9d:52:c9:71:8f:df:5c:87:0c:
d4:15:e3:19:d1:d2:22:4b:74:62:a9:cb:09:f1:25:
1d:33:03:f2:ae:10:ab:44:70:14:13:fc:2c:31:fb:
06:d7:22:14:63:a8:a4:d0:ee:24:5c:fc:f2:6d:3f:
f3:72:85:f4:c2:36:1d:e5:0d:b4:55:5c:39:9f:ab:
56:67:1f:d4:eb:ed:70:78:f0:2f:67:d6:68:d5:cc:
88:db:95:e4:b3:98:7b:1c:de:66:e2:6a:5d:2c:a5:
99:13:18:42:04:80:c4:45:b3:aa:5e:50:b2:26:1c:
29:65:37:b0:8e:5d:64:e7:27:e9:83:9b:05:ad:b2:
dc:71:0e:66:d5:58:49:ff:b7:26:6d:9b:ea:04:67:
e6:64:eb:d6:d0:5f:62:1e:a3:ae:a3:cd:8a:50:97:
a5:16:bc:70:72:b6:8a:b5:9e:d8:21:9c:f9:c1:21:
db:a5:f5:71:9a:99:92:67:af:1c:c9:cc:67:da:24:
63:de:64:f9:dc:b9:03:f6:9a:61:c4:f0:b9:1c:70:
e4:b7:44:fb:4b:be:89:25:4d:b9:51:60:94:f4:4d:
c0:de:01:3a:d3:38:f3:d2:e2:c9:7b:e9:55:f4:8d:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:AF:CD:C3:2C:E6:73:69:D5:58:3B:52:87:3D:B5:A3:ED:C8:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfe9de26-c6e3-320b-af64-024e0c841a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.247.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:2a:c0:b5:ad:bd:6b:c1:34:03:98:5d:d7:30:45:be:d2:b6:
15:50:d5:1c:fd:3c:05:99:b4:41:5f:b1:18:43:cf:e9:6e:85:
78:ae:17:87:fe:4d:28:53:0e:d1:ff:d8:db:18:89:fc:6b:98:
05:6b:d2:e8:cb:94:84:fe:6f:e4:97:80:cd:f6:12:be:3a:3c:
65:4b:71:45:be:24:55:52:55:b6:c1:0c:86:41:ed:ac:3c:41:
90:8e:fc:7f:a5:ed:8e:09:72:9b:48:6e:70:dd:fe:7f:57:a8:
99:9c:34:4c:8b:c2:44:09:b0:77:31:6c:72:50:6a:7d:20:61:
e4:66:6d:66:80:14:62:a8:1b:83:c5:ef:11:7f:2d:ce:2b:ca:
0c:22:a7:71:1d:01:85:42:9d:de:80:f7:f6:90:b7:0d:95:00:
ab:07:ec:3c:67:b3:29:94:ed:94:40:3f:4e:c3:fe:33:e2:76:
7c:c0:06:de:52:0b:c3:46:40:10:9c:32:ad:39:b7:04:20:63:
20:09:77:a9:9a:b4:b3:51:0e:d1:ac:22:c9:4e:e5:69:85:45:
d1:73:e1:68:1a:02:0d:e8:82:ac:69:9b:e6:be:83:58:f0:53:
5d:7e:43:48:b1:49:40:98:48:c8:f5:77:1a:50:51:b5:c3:2e:
29:57:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:50 2025 by rpki-client