Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/024bf5eb-4918-3d9c-a625-08efd8fbeae5.roa
File: 024bf5eb-4918-3d9c-a625-08efd8fbeae5.roa (raw, json)
Hash identifier: d7R8bC3n2/Vy5SUm4q/DEkKqRBAOtSWCc2xg4YNLlGY=
Subject key identifier: 56:E8:2B:0F:F3:BB:43:FD:D3:E7:5B:DD:5D:36:F2:CC:A4:5E:CD:F5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B06660AB8BDF9762D452AA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/024bf5eb-4918-3d9c-a625-08efd8fbeae5.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.238.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:66:60:ab:8b:df:97:62:d4:52:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=e91fe25a-6e7b-4515-9de0-97b3101a3893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b6:3f:b0:66:f0:d7:32:98:ac:b3:fa:c4:4e:
14:76:67:30:4e:8c:88:0f:7f:8d:6b:4f:60:64:d3:
05:34:47:39:04:a4:81:2f:b6:e5:7d:ee:66:28:dc:
14:2b:8e:27:61:18:04:c2:5a:31:51:21:3a:2e:fe:
32:20:1d:57:a4:bb:af:07:73:76:a2:77:4b:80:f3:
cf:32:a2:c8:8a:82:49:28:0e:38:32:a7:4d:ff:c9:
ec:a2:33:49:f8:5b:f0:42:fd:38:88:6a:69:26:69:
d4:3a:ea:ab:b9:43:16:a7:88:72:f3:e3:c0:9c:7e:
d7:61:6c:d4:a6:0d:38:28:be:52:d6:e5:b1:13:46:
7b:01:92:9b:6a:43:72:71:10:42:9c:3d:77:e6:cb:
64:3c:2d:b1:12:ac:1f:19:3b:ad:fb:60:03:17:68:
fb:e1:25:46:49:19:80:c4:b3:00:4d:02:e8:4b:9f:
ac:4f:2d:7a:b7:c6:08:3a:50:c8:65:8e:48:cc:21:
f3:71:d6:01:9d:22:31:27:c6:84:24:c6:04:f9:b5:
d5:89:df:d1:02:c2:a2:ae:ef:d3:30:16:36:94:45:
fb:1b:10:f8:f3:0d:d4:ef:6c:3e:8f:54:33:cf:65:
64:7a:c7:db:84:33:58:05:f3:66:36:02:36:bf:f7:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:2B:0F:F3:BB:43:FD:D3:E7:5B:DD:5D:36:F2:CC:A4:5E:CD:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/024bf5eb-4918-3d9c-a625-08efd8fbeae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:12:1b:d5:29:a5:9f:13:ac:ab:c0:c0:f4:02:35:9d:8a:7f:
2b:cc:e3:74:ea:f7:80:2f:86:77:30:c4:33:0e:d8:64:03:87:
76:74:5e:22:f2:41:0f:e3:bf:38:9b:95:63:0d:d3:24:2b:93:
af:ce:46:f0:43:9d:e3:46:cb:a4:83:6d:25:ed:c1:71:55:8e:
46:9a:9c:e2:7b:a7:f4:a8:04:4b:30:79:27:10:a7:29:57:a8:
ba:d1:76:63:67:bb:f0:08:fa:61:10:d7:e3:20:37:db:e7:c5:
bf:67:e1:f9:fe:fe:0d:30:62:22:c1:ae:4f:6c:dd:b4:12:f6:
64:48:2b:65:94:8b:ff:8e:d8:67:4e:aa:4a:92:02:40:8a:95:
a9:80:fe:34:aa:15:12:ab:b1:d6:b8:cf:85:73:3e:e9:d2:65:
b2:8f:c8:ef:b0:0a:f0:f6:a7:c3:f2:f4:4a:5e:2f:6c:2c:8e:
85:da:94:90:46:73:43:a5:5c:36:69:3f:99:30:3f:3e:d9:0f:
3d:dd:5b:44:3f:96:e5:b2:f6:06:06:52:ed:83:dc:79:87:c6:
9d:22:ab:78:78:c4:91:73:43:d4:78:28:61:72:52:25:c5:cb:
7c:b0:ed:d2:b0:91:27:d8:f4:c0:cf:95:3e:bb:a1:bd:8e:7c:
f8:fa:8b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:44:36 2025 by rpki-client