Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d06e95d-8243-3374-ab19-84aa75a01f07.roa
File: 0d06e95d-8243-3374-ab19-84aa75a01f07.roa (raw, json)
Hash identifier: o0QY84SIBHf55Ct8ij1YiVggMrnt0fdGOK3aZHKD8cI=
Subject key identifier: A5:8B:E9:18:D1:FA:5D:9B:89:50:A1:92:79:1B:F8:91:22:B8:2B:5C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5587D551E268E1C5E950
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d06e95d-8243-3374-ab19-84aa75a01f07.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.188.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:55:87:d5:51:e2:68:e1:c5:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=71a8a27c-3fb9-4aef-addf-bca14af2b3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:fb:ea:98:e7:a3:6b:45:61:db:15:ee:4e:
eb:e2:1b:35:3a:91:38:72:fa:20:09:7f:63:9c:f1:
9a:bb:9a:42:e2:22:43:26:db:1e:e3:55:3d:b4:7e:
a8:c9:6d:6a:81:1d:0e:60:17:e2:e2:33:8d:33:f0:
72:45:5b:71:24:63:b8:98:7e:c0:e2:c0:28:65:4b:
b5:38:02:ea:5f:c7:e0:93:b1:d0:9b:5b:43:df:d1:
ca:1c:47:54:64:44:c6:f6:fc:12:1e:c3:71:f5:7e:
0b:47:02:7e:52:e3:62:00:75:03:03:24:15:e0:9c:
9b:7c:29:7f:b9:9d:d9:ad:0a:e7:47:e9:54:c8:a5:
db:fb:fe:ae:8b:16:94:87:1e:74:f4:88:c2:0f:e6:
fb:0a:f6:39:dc:e2:fa:5e:93:b9:8f:ad:5a:6b:fb:
d9:f7:67:e0:5d:01:74:02:fe:bf:23:ca:90:b5:49:
b3:64:03:b8:b7:ea:76:e4:20:7e:a2:41:a4:ed:1b:
66:1c:ee:a5:41:3f:5a:c5:c4:93:2a:36:15:16:06:
9f:8c:ff:98:c7:44:45:ad:b8:5b:ac:f8:46:92:4c:
02:c7:a6:e4:30:2d:66:a6:78:c7:4f:6e:67:29:ee:
0d:67:ba:a4:dc:a3:d8:12:55:8e:d3:54:9b:e5:8d:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8B:E9:18:D1:FA:5D:9B:89:50:A1:92:79:1B:F8:91:22:B8:2B:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d06e95d-8243-3374-ab19-84aa75a01f07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:b2:6c:a0:04:03:96:f3:9e:52:75:47:c2:11:2f:19:55:b4:
59:df:0f:31:6c:f2:10:b2:4d:c3:41:75:e3:89:7c:ad:56:4c:
46:61:8b:72:92:d2:79:16:df:78:b0:f4:f8:47:8d:58:cc:7f:
62:93:b7:87:a6:27:55:16:19:4c:6b:0b:99:2c:cd:b3:b8:95:
cd:4a:2a:db:b3:d3:2e:aa:fb:16:cc:74:f7:fd:89:5f:fe:ab:
3f:68:72:89:ea:ce:79:65:9b:5b:5f:30:88:e0:d7:2b:fd:03:
92:5a:a0:b0:3d:15:4e:57:29:6a:50:47:b5:fc:e4:51:e1:45:
fd:3e:01:14:d9:cb:02:9c:91:40:34:14:d6:cd:73:ef:79:6c:
e7:15:49:6f:2b:18:85:6c:e4:b7:62:46:73:0c:07:2c:dc:ba:
fe:ab:39:a5:df:0b:db:c6:64:5e:8d:eb:0e:15:a4:ac:21:9d:
3a:41:8d:91:d7:59:7b:44:51:a0:da:19:05:c8:89:d7:d8:c8:
ec:e0:0c:5a:3d:54:fb:d7:3b:54:63:ef:1c:ac:c0:f4:c0:5d:
41:1a:25:f2:f8:08:52:8f:0f:75:ee:cc:dc:10:c0:67:85:05:
35:f6:43:f5:d3:e1:9f:b5:e0:6c:dc:32:48:e4:bb:de:1c:5c:
26:42:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:46 2025 by rpki-client