Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0785972f-4d50-3864-950b-1463368ca950.roa
File: 0785972f-4d50-3864-950b-1463368ca950.roa (raw, json)
Hash identifier: ClOcnHQRuA9w7EXtbzo1Ol2ViFjFRWTD4FqhsZO7jSI=
Subject key identifier: 2B:59:16:08:7D:4D:34:45:49:DE:36:63:61:CE:FE:B9:EE:25:8E:7C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A12812ADF17E9E3C1B21E60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0785972f-4d50-3864-950b-1463368ca950.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.195.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:81:2a:df:17:e9:e3:c1:b2:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0d4c81df-e696-4cdc-bcc0-e91511a23714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:06:da:44:a5:83:ab:ae:88:97:f4:2e:29:
cb:1c:4d:22:66:09:ba:55:42:fe:e1:74:74:c7:b9:
0c:c2:3d:d0:05:9a:d5:7d:3c:1f:fa:ae:6f:17:8f:
0b:e6:45:66:ec:fe:f5:43:ad:5b:ff:61:bb:79:e3:
31:ee:12:92:de:d7:c1:6d:cd:98:cc:0f:7c:f8:b5:
c3:0c:56:ad:a9:cf:dd:4f:0a:98:0d:20:5a:88:b8:
ec:9d:ee:19:f2:d4:f1:9b:48:32:d3:de:9e:6e:52:
c0:d0:67:5f:a9:c7:8e:95:42:1c:2a:58:08:85:82:
7e:c6:e7:36:4d:dc:08:b6:96:04:24:be:4e:ad:7e:
15:ca:30:bb:e5:48:ba:98:0b:11:f1:fb:92:d7:2d:
78:9d:6e:61:67:96:3a:13:68:a5:fe:c1:53:93:46:
9a:83:d4:a0:88:cc:f1:49:3f:ea:ae:92:f7:5f:52:
67:44:71:a4:6b:18:86:89:b8:46:e5:4c:91:4c:44:
59:32:e0:ce:a8:e1:a9:f5:be:6b:92:b7:06:35:63:
b7:cf:2b:d5:51:fc:2f:20:37:c1:24:75:cd:8d:bf:
67:15:75:c2:a0:b9:bc:e6:34:e6:02:c7:1c:00:ec:
91:ec:a3:c3:cc:41:ee:23:23:88:04:dc:9c:6b:29:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:16:08:7D:4D:34:45:49:DE:36:63:61:CE:FE:B9:EE:25:8E:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0785972f-4d50-3864-950b-1463368ca950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.195.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:cd:58:e6:71:62:0e:79:ff:8b:29:fd:f6:5e:89:4c:84:a0:
ec:fe:42:24:fe:df:ef:c5:bc:dc:4e:4d:1e:be:e8:ee:8b:cd:
e4:fc:62:fb:03:a9:c4:0b:da:74:7a:e9:1c:d3:7f:15:4f:e7:
ab:7c:92:97:f6:fc:cf:38:e3:c4:6f:34:71:bd:39:f7:ac:0a:
30:c9:30:f5:a2:6d:27:d7:83:c8:f9:90:1e:8f:70:2d:75:de:
df:75:11:d4:48:ec:67:39:e6:8d:d2:7a:e9:16:07:e8:85:e0:
49:ee:d2:25:14:46:f7:66:90:86:2d:af:da:60:24:2b:24:da:
7a:51:ae:e0:78:a9:cd:26:31:a4:ec:bd:e5:3f:a9:4b:c7:90:
09:8d:48:e4:52:42:23:f4:c7:58:de:9d:a8:27:b6:7a:d8:cd:
9e:d3:42:23:8b:6a:19:b2:90:92:de:9c:8f:5c:8d:18:84:77:
91:2c:1c:32:ca:f3:8c:ae:56:d1:4d:48:19:6f:84:7c:f4:f8:
c7:97:81:cd:24:52:39:7f:eb:75:c0:5e:01:e3:13:1c:5d:a1:
d7:87:20:f1:5a:7d:06:33:f6:12:f7:ea:80:21:1d:a1:f8:1f:
22:08:5b:2d:3b:30:44:b9:bb:a3:ed:81:97:a2:ec:52:11:1e:
4c:3b:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:46:08 2025 by rpki-client