Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa07b5ed-3fef-3187-8a04-5e76a3dfae78.roa
File: fa07b5ed-3fef-3187-8a04-5e76a3dfae78.roa (raw, json)
Hash identifier: jZYlf1Oc5eDdSYQycRi2CUgqba9MENYwX4hZHJ/jNfs=
Subject key identifier: 31:EA:6E:3D:72:17:EA:0A:2B:B5:CF:8D:A3:2A:1F:45:15:18:46:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B8E8E6C9AA5BC9F1904B92
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa07b5ed-3fef-3187-8a04-5e76a3dfae78.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.247.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b8:e8:e6:c9:aa:5b:c9:f1:90:4b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4c1695a4-52f9-4578-b394-502ba8d6533b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:99:21:bb:cb:b2:d3:2c:a8:80:09:ed:b2:
b2:eb:67:b1:32:59:96:25:3d:51:6e:f5:3d:11:38:
f9:83:30:02:10:ee:74:5c:4a:55:93:9a:04:a8:fa:
6c:69:8e:7b:59:30:75:3a:54:e9:99:5b:32:9d:c0:
2f:5b:d2:1f:38:7c:d6:5c:76:33:2d:97:47:bc:65:
71:6a:89:d2:72:44:f2:be:4b:bf:7e:56:6d:b5:8e:
a6:54:73:66:42:c2:47:13:3d:2e:4d:7c:8e:aa:89:
07:c8:ca:03:e6:0b:cf:60:9f:80:34:4d:7a:9e:30:
8e:0b:fd:73:40:8f:7f:a6:3f:20:a2:38:ce:d0:e8:
49:3b:3c:f6:d6:1c:bf:6e:f1:a2:e1:28:84:a1:e8:
5c:a5:e1:27:6e:b7:de:6a:e7:73:c9:52:09:df:f8:
e1:00:98:84:95:19:81:8d:0d:73:ee:bc:e7:c3:be:
df:d9:0a:b1:1f:80:78:9c:1b:b1:8b:4d:7f:e7:e9:
c3:98:a1:4c:5b:c8:80:f8:69:7d:30:20:67:b0:41:
e5:30:bf:e2:d8:59:f9:ef:32:a7:e9:cd:b8:b7:99:
a4:58:0a:e0:fe:8b:53:dc:f6:54:ad:53:52:d3:94:
bd:86:b6:b2:e3:1b:35:e8:f7:ca:7f:dd:ba:ef:22:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:6E:3D:72:17:EA:0A:2B:B5:CF:8D:A3:2A:1F:45:15:18:46:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa07b5ed-3fef-3187-8a04-5e76a3dfae78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.247.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:86:d1:00:ef:36:c1:50:1c:1d:42:86:98:1c:8c:c0:5c:fe:
4e:d9:a7:d9:8b:cb:cc:d5:04:87:d2:a0:7d:bb:63:f9:65:b7:
3d:0f:fd:40:d8:d0:f2:35:27:cd:0c:5c:63:19:f4:48:e4:f7:
f1:df:02:fb:6e:9a:f4:5b:b0:b1:4d:0f:1a:be:73:fe:75:41:
ef:e6:54:1f:bd:91:0f:40:45:14:23:79:1b:5a:8b:dc:62:f0:
56:e8:9e:bf:ee:26:00:f3:15:8f:e8:9d:28:00:65:d5:32:89:
ac:74:67:2f:ef:a8:2e:4a:8d:d7:5a:e8:6c:f8:3b:48:64:fb:
fb:ad:49:3d:46:29:d8:f0:08:53:09:d7:81:06:0d:e1:d1:56:
70:cb:a8:40:26:d0:17:8d:68:d4:9c:8b:16:9a:56:24:f6:e2:
51:8b:a5:80:7d:49:5e:0c:b6:0e:b3:1c:56:3e:28:29:43:a4:
3a:22:49:0f:40:be:e9:3d:a3:86:d5:9f:76:8a:aa:6c:93:89:
0b:32:6b:4f:65:d5:5b:e8:54:a0:23:8d:00:65:7b:b1:22:64:
60:a9:63:ed:97:4d:e7:71:2a:dd:81:ca:dd:ca:8d:7d:ae:95:
eb:e8:46:93:31:2e:4d:37:a0:e9:70:dc:cc:ea:3d:2b:88:1c:
55:e0:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:30:38 2025 by rpki-client