Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0680e8d7-7e68-3446-9b70-74b8a6dbf261.roa
File: 0680e8d7-7e68-3446-9b70-74b8a6dbf261.roa (raw, json)
Hash identifier: c+2EX0hVm/FZS1OdxKIt2LVbA7IAlwn8HA6fuMgHhvg=
Subject key identifier: 41:2B:82:77:FF:22:D5:01:AE:75:36:B4:36:E8:17:B0:FB:1C:10:E5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A20B6CC0C2393146E2AD980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0680e8d7-7e68-3446-9b70-74b8a6dbf261.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 19527
IP address blocks: 35.216.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:b6:cc:0c:23:93:14:6e:2a:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=69b2bef4-afad-4d24-9933-4919f067a8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:7f:ba:c9:76:5a:39:2f:93:f2:01:21:ec:
83:10:e7:b2:72:95:c9:e3:ea:0e:8a:ad:00:e0:9a:
e2:a6:4a:6e:94:70:c9:6e:af:54:df:f2:b5:6d:de:
54:18:64:96:13:7a:2c:03:81:13:5b:e7:6b:a7:47:
af:a9:03:c6:b5:d4:35:30:09:52:4d:11:44:bc:0e:
aa:e8:d6:1a:83:0c:50:db:8c:4d:60:89:74:35:0d:
2e:8b:dc:35:20:e5:4c:40:77:b7:dc:fb:50:93:fe:
93:d5:dc:ee:ca:0b:a1:c5:e8:bb:d7:e3:10:ec:1a:
09:9e:a3:2d:b9:8d:1e:0d:85:a8:e0:20:0a:90:bd:
e1:b9:09:0e:d2:0d:db:4e:8c:36:46:b2:f4:8f:37:
a0:13:03:a3:f5:f9:07:45:68:ec:95:80:02:ce:c7:
1b:50:cc:a3:06:b5:02:a4:f7:5e:78:9e:75:eb:a1:
98:b2:60:3f:24:f2:32:33:ac:d0:d4:45:0e:69:57:
fd:c9:18:84:85:5c:ce:f1:3a:34:86:71:1a:de:ea:
a8:15:69:c3:45:7a:8f:41:5e:81:ea:1f:95:5a:30:
b0:42:88:92:aa:6a:a3:1a:bf:4c:f1:c6:fa:d0:6b:
d5:84:d0:0f:0f:00:9f:b6:5c:23:19:08:24:09:74:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2B:82:77:FF:22:D5:01:AE:75:36:B4:36:E8:17:B0:FB:1C:10:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0680e8d7-7e68-3446-9b70-74b8a6dbf261.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.216.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:04:59:dd:7b:f0:e0:64:95:40:66:06:7e:16:b3:de:cc:7d:
57:85:1b:42:8b:13:5e:e0:9b:90:d5:b6:1e:e4:ec:28:9f:3e:
a6:b4:6d:7a:fd:2e:4f:29:df:6e:b1:fa:b6:01:f8:3d:18:a2:
96:70:f4:7e:a7:5f:11:25:9e:8f:eb:12:70:d5:f3:e4:ff:d5:
a5:be:93:30:5b:48:5d:66:cb:d1:64:f2:0d:7e:14:9b:7f:ca:
33:9b:9f:36:86:b7:05:62:1e:d1:7c:f9:eb:87:f4:bc:61:eb:
0c:c6:f4:c1:d2:95:06:a8:56:c1:e9:36:4a:0d:b8:dc:0b:b3:
9f:cc:f3:2b:9e:24:5e:61:97:a1:2a:bd:1c:c8:6f:ca:d1:fd:
a3:e1:8f:ff:df:5c:b4:bd:a8:86:f2:3f:35:f2:36:cf:9d:4b:
8f:25:28:f2:c5:0e:f9:72:54:53:16:57:bf:70:24:40:63:ee:
2c:33:42:52:7c:c2:f0:d2:00:76:48:6b:78:66:2f:b6:3a:6e:
2e:80:64:19:a6:c2:4c:f5:af:b5:3e:c6:1f:03:bd:51:ed:59:
e2:ac:ed:d4:39:04:8c:4f:e8:22:50:86:9c:f7:7f:b1:af:9c:
43:10:d8:1b:30:51:1e:e7:24:5d:63:c1:8c:ec:ca:99:ab:1e:
1e:91:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:29:32 2025 by rpki-client