Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea427e53-9e86-3095-bb20-e0767070c3d1.roa
File: ea427e53-9e86-3095-bb20-e0767070c3d1.roa (raw, json)
Hash identifier: D9Xhf+Hw4TQa4LPyNb+ngmqsHUW52Cuz2X2uY/l2S8A=
Subject key identifier: DE:6F:04:47:E5:5F:06:7D:7A:76:39:86:FF:4D:2A:54:63:28:3D:F4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583D79F5011D354702917942A580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea427e53-9e86-3095-bb20-e0767070c3d1.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Sun 07 Jul 2024 04:00:00 +0000
asID: 19527
IP address blocks: 35.219.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:f5:01:1d:35:47:02:91:79:42:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Jul 7 04:00:00 2024 GMT
Subject: CN=35e20a1d-0fa8-4e33-9b39-f053ad022a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:53:74:47:0b:13:13:56:c0:a9:4b:44:86:
32:4b:ec:17:65:e5:d5:84:1b:88:93:1c:bf:48:24:
e9:a8:0d:53:e3:89:54:5d:16:fc:31:b9:30:4f:df:
c7:a1:bf:1a:bb:01:3d:38:b4:51:16:19:6f:7c:75:
29:97:06:71:e3:79:4e:fc:9d:21:42:db:92:08:3f:
60:2a:ae:4d:08:96:6e:19:fc:21:e1:04:5a:00:a9:
2c:aa:58:0e:2b:a5:89:71:bc:60:49:de:97:a0:b9:
a8:cc:08:e3:05:a3:eb:72:cd:2f:bf:22:b7:47:d3:
ac:52:3f:e2:0c:41:d2:df:eb:1f:9e:3c:77:f6:36:
f6:33:15:5a:e9:aa:1e:f8:26:09:09:e7:6a:46:46:
e5:73:af:53:e7:25:a4:e9:98:92:09:97:25:39:64:
14:f9:d0:2b:71:cf:af:e9:8d:3a:b3:f1:8c:1b:bc:
a2:ad:fc:ea:31:cf:76:24:22:06:d0:2e:8a:17:60:
2b:80:09:fe:b7:e9:cd:d3:46:33:75:58:e7:5f:d8:
db:1e:d7:bc:46:f6:fa:5a:da:b9:9b:9b:0b:eb:4e:
02:58:49:f7:e9:b5:8e:21:c0:d5:e1:54:ed:22:ca:
de:f3:91:83:44:17:57:01:08:1c:30:6f:e1:99:51:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:04:47:E5:5F:06:7D:7A:76:39:86:FF:4D:2A:54:63:28:3D:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea427e53-9e86-3095-bb20-e0767070c3d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.219.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:3e:02:b4:fc:03:7c:51:47:02:53:40:f5:d1:71:7c:2f:12:
26:40:6d:27:34:5d:62:63:5c:84:09:32:c5:f3:d4:29:10:e2:
cf:e1:85:e6:62:75:31:5d:c3:fc:f7:20:d9:cd:da:86:0e:2d:
b8:83:50:3b:2e:7d:ca:f0:1c:35:f3:f0:52:cf:09:7d:94:aa:
fe:b9:f7:8b:30:5a:fb:b2:69:c3:bc:cc:2e:ae:b1:58:01:6e:
ee:87:85:78:38:71:42:f9:3a:65:aa:1e:8f:dc:61:3c:f6:72:
04:3e:cd:37:7a:e4:02:05:38:b1:12:73:cf:c6:02:cb:b3:f4:
91:78:85:79:82:7c:6a:79:df:5b:a0:e9:22:6b:84:0f:2f:89:
06:00:c9:02:b8:fa:8c:ab:61:8c:2b:bd:2b:55:14:69:d0:ba:
6b:26:f2:98:c7:7c:e2:dc:74:c4:a4:58:bc:89:e8:3d:3f:c3:
27:aa:a7:49:ad:75:41:1b:4e:d0:b7:ba:99:85:75:ee:72:b7:
43:52:b5:77:85:a8:c2:e3:99:7d:a3:2d:3d:6a:6f:20:92:45:
42:e3:5f:ce:ba:25:85:9e:66:e2:d0:a8:d0:64:e1:5e:4f:0c:
31:50:5d:9a:c3:b7:83:dd:cc:2c:43:a7:62:5a:b4:4c:b4:94:
6a:ee:d6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:06:07 2025 by rpki-client