Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08569355-168a-33f4-bcba-342869fcf6ae.roa
File: 08569355-168a-33f4-bcba-342869fcf6ae.roa (raw, json)
Hash identifier: L8kSIQLYnm/z4l7foDgyp64+fA8qv13lZzgry6/z1O0=
Subject key identifier: 2E:D2:80:9D:8E:39:80:15:D9:F6:33:30:80:14:51:B1:3B:36:8E:6C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A18BD8967B0581B601C9B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08569355-168a-33f4-bcba-342869fcf6ae.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.202.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:bd:89:67:b0:58:1b:60:1c:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=499e1c6a-771c-46af-9e6f-66ae9dc150e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:7d:39:9c:e3:f4:c9:68:5e:d5:ed:df:e7:
29:b6:37:ef:7c:f5:a6:20:f9:3c:0c:9c:3c:2c:3f:
0d:e8:8d:ff:a1:b9:1e:7c:a0:5f:c4:3d:b7:1f:e1:
a0:e6:5d:a3:c9:45:70:9f:4b:cd:bd:40:56:59:57:
f0:49:25:a5:f4:f9:25:dc:07:ea:92:0a:1d:58:5a:
39:3b:3b:12:e7:b2:fc:3d:bf:11:37:66:b0:15:7f:
ea:96:bf:e8:e2:5c:52:0d:e8:52:0e:13:1c:a4:65:
41:e0:05:3a:3b:5b:84:dd:08:40:d8:89:42:bd:98:
ee:09:5e:4e:59:0c:00:f5:a3:08:6a:f7:1c:10:31:
ea:7d:e9:14:4b:52:ed:26:a3:0b:c9:10:32:4c:98:
6b:5a:3f:a8:98:eb:88:ed:df:d2:a4:44:33:88:15:
e5:e0:b6:ee:d1:ff:be:ac:55:9a:49:16:bd:25:30:
85:68:43:cb:48:07:c2:1e:a9:c3:ad:89:64:39:a8:
fa:26:13:39:55:87:3a:f3:a7:6d:c6:7c:51:b0:33:
fd:3a:af:14:38:45:b3:00:36:45:00:79:10:f4:10:
40:fa:90:b6:f6:84:5c:51:aa:28:ec:ee:b6:6f:63:
2a:90:c1:a2:23:29:25:cc:50:d2:b7:f2:1f:ff:70:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:80:9D:8E:39:80:15:D9:F6:33:30:80:14:51:B1:3B:36:8E:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08569355-168a-33f4-bcba-342869fcf6ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.202.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:bb:5b:2a:72:14:c4:fa:ff:95:41:2b:57:46:5f:28:73:f5:
3f:2d:86:dc:8f:97:a9:8f:57:e7:9f:70:3a:70:94:9d:db:2c:
6a:f8:cc:bb:db:14:da:1a:9a:a2:36:97:3a:c8:21:a1:a5:d0:
07:9a:7d:95:91:6e:85:21:a6:46:ce:8c:46:04:8c:ac:26:11:
e0:98:ba:be:1d:d0:ea:a7:43:e7:fa:13:d3:9a:fd:a3:b3:2a:
f8:cc:6c:aa:17:5c:21:fc:35:97:7c:d5:14:8d:03:16:4f:9d:
9d:4b:e6:2d:ed:6d:fd:66:b6:4b:9c:5b:d4:92:bb:dd:f9:be:
40:e9:ca:f5:2e:41:7c:cd:43:73:3d:02:56:09:6c:94:9b:59:
01:86:17:1b:91:c5:0b:a3:d9:3d:ab:fe:13:4d:f9:fc:fc:5f:
64:4a:18:1a:c1:52:9b:29:b6:d2:cb:32:70:35:aa:92:a4:b7:
ae:7e:c7:9a:01:e2:aa:9d:e4:61:40:42:b1:5e:83:4c:40:6d:
d9:16:a5:2e:47:a3:fa:d2:49:c7:fc:6e:6c:ed:eb:92:61:30:
ad:aa:b3:aa:be:f6:99:7f:ab:8a:61:bd:8d:bd:5e:35:e9:3d:
9a:43:34:d6:75:62:aa:af:7f:62:d7:1d:5e:d5:ad:a0:97:f5:
ce:57:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:02:25 2025 by rpki-client