Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e293f352-f6a4-3a4a-bf20-a307ea9d2f6d.roa
File: e293f352-f6a4-3a4a-bf20-a307ea9d2f6d.roa (raw, json)
Hash identifier: ewFdM2sBI8xBYZfcKNgdSzIUhRxAtJES2KC1Qhjd3Kk=
Subject key identifier: EE:BA:62:3F:02:7E:5C:D9:D9:87:A7:B5:30:1D:B7:E5:CA:73:0C:68
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BD429E5D0DF017864C2460
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e293f352-f6a4-3a4a-bf20-a307ea9d2f6d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.238.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:42:9e:5d:0d:f0:17:86:4c:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=63fc070f-1b32-4548-935e-cbdb6ab0a3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:44:ff:7c:56:7f:dc:ed:ab:09:78:ca:4b:
39:b5:fa:b9:fa:4f:e8:84:4c:c1:dc:73:32:77:c7:
01:3b:a3:88:6f:97:32:e2:fc:b3:c1:35:28:9d:98:
ba:72:56:e9:d1:59:94:35:23:b6:6a:49:87:96:04:
a4:e3:40:17:36:96:f6:5e:a1:83:ca:f4:29:bd:3c:
af:50:f9:5f:ea:63:c2:fd:99:5a:dc:0e:7b:0b:fa:
10:e8:1e:c8:a6:b2:7d:b7:c4:21:92:6c:2d:bb:62:
3d:f0:a3:1e:61:87:e3:be:c5:9d:0f:e5:b3:d7:6c:
dc:66:c9:e4:54:ad:d6:60:4e:e7:a8:d1:ae:f1:23:
07:e9:64:b2:d1:f1:50:ee:c4:23:20:88:4d:aa:e9:
b0:c3:88:7a:03:9e:4e:0e:29:d0:5b:ba:78:a2:0b:
e7:7c:08:7b:80:1f:b6:d7:41:ba:ed:7f:07:67:42:
60:99:c6:a5:e5:d6:93:e3:d2:cf:fc:b1:92:69:bd:
fb:31:39:03:0e:02:cb:36:75:51:3c:db:44:62:16:
9e:23:e0:97:5b:0c:cf:91:ae:59:4b:a9:a5:0f:9c:
97:9e:19:8f:f9:f9:41:6a:1f:81:e5:ac:6e:02:41:
00:d8:59:fc:73:34:b7:98:bf:62:fb:78:ef:48:c0:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BA:62:3F:02:7E:5C:D9:D9:87:A7:B5:30:1D:B7:E5:CA:73:0C:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e293f352-f6a4-3a4a-bf20-a307ea9d2f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:d6:59:e8:74:d8:f7:8c:c0:00:39:d2:9b:3e:f1:69:37:99:
a6:b2:cc:5c:3c:4a:56:82:d7:be:23:7a:20:3f:80:12:79:37:
ea:26:3f:14:c0:e1:36:72:61:e9:d5:86:fd:95:72:ba:45:6a:
f3:09:5d:c8:46:87:90:95:bf:61:84:1e:c4:19:47:da:c7:33:
20:c9:ae:da:36:78:03:36:13:62:84:b5:6e:d1:72:db:e2:6f:
89:6a:7c:ae:1a:38:85:d7:a2:14:b0:9c:b8:db:62:e5:09:33:
d7:f2:70:5e:c0:58:20:24:d9:ef:3a:b1:99:24:45:a7:c7:cd:
c4:96:a5:55:83:5b:f4:ec:c1:92:40:8b:3e:27:1c:93:35:50:
3d:3c:2a:a0:7d:df:7b:26:5e:d2:96:f7:91:63:4e:9f:09:9f:
95:41:a9:d7:0f:ad:94:17:7e:06:e5:ba:76:24:7c:b3:2d:ad:
55:c3:0c:4a:41:b2:ef:a7:b7:96:a3:4a:a7:51:0a:ce:2c:30:
89:0f:1d:84:25:38:af:87:4c:44:e6:d6:b0:4b:89:30:e0:d3:
f0:db:63:8d:a9:1c:d3:28:25:0d:be:e7:ca:73:1e:7e:9e:93:
b6:2a:88:14:3a:78:7b:75:0f:2b:07:8b:46:a6:06:b7:91:7a:
1a:82:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:30:24 2025 by rpki-client