Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/115a124f-1693-32d1-be8a-487133d03e44.roa
File: 115a124f-1693-32d1-be8a-487133d03e44.roa (raw, json)
Hash identifier: BZ0LAuiQ/i1gDV5l8seDsJhskupO2Be8KX5alIgUrfE=
Subject key identifier: 05:4C:C5:0B:9F:A3:47:50:10:5F:0E:93:3E:C4:24:60:4B:BD:8E:22
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F908320AC930BD566C3900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/115a124f-1693-32d1-be8a-487133d03e44.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.244.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:08:32:0a:c9:30:bd:56:6c:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e88736a8-7b4f-4ea7-94e6-d7c66cd53b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:ab:8c:b6:dc:91:3f:9e:de:97:1c:88:61:
bc:49:fd:07:81:cb:8b:f5:52:88:0a:30:28:35:3c:
af:6b:d8:8d:d0:06:22:f6:a0:63:67:a5:9c:c1:a1:
b0:ac:bf:55:fc:a0:ec:05:a3:41:10:50:f9:51:66:
65:31:aa:37:6c:72:d8:ce:5d:ab:0b:c1:c9:90:2b:
c3:a6:1b:ff:16:8a:c7:9e:f9:00:d0:a1:c0:a7:ef:
9d:91:dc:1d:d2:3e:8a:8c:e4:29:bb:dd:25:d3:08:
82:65:e4:5a:e6:8b:fd:19:f9:fc:7c:72:61:54:e7:
3f:c7:a0:bd:6d:8a:c8:64:0d:60:1d:d8:d2:10:4c:
dd:c6:22:fa:12:e5:8f:8d:49:91:f4:55:3b:58:55:
83:bc:15:a5:c1:cd:38:83:19:21:cc:2a:17:2a:ed:
c6:ee:6e:78:59:f0:86:4a:5c:d0:94:03:ef:aa:e8:
3a:96:17:7c:47:7d:03:ae:b3:fa:97:cd:87:ac:b7:
71:11:3f:c5:fe:e3:44:2d:b5:9e:ee:99:25:02:38:
4c:7c:27:d0:ba:fc:a5:30:10:b1:bb:23:92:bc:53:
ca:e6:3a:dd:04:97:66:59:7e:9a:16:68:7a:da:1f:
09:56:2c:d7:3d:de:12:a2:73:77:db:36:03:1c:09:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:C5:0B:9F:A3:47:50:10:5F:0E:93:3E:C4:24:60:4B:BD:8E:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/115a124f-1693-32d1-be8a-487133d03e44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.244.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:3b:19:0f:0e:8b:82:58:45:ee:de:f2:9e:3e:d4:28:7b:7c:
b5:c8:a5:7f:9e:8a:d7:3c:ba:e2:aa:40:13:27:6c:37:ef:91:
84:b5:88:d8:5b:ac:3f:2a:a9:d8:b1:c0:0a:ae:b8:b2:52:27:
b4:af:15:cc:23:4d:07:0c:fb:2c:ae:98:94:49:8f:41:57:00:
23:3f:f7:12:9d:9a:aa:ad:4c:5e:0f:3f:0b:da:48:7f:95:b4:
0c:e0:eb:6d:4f:70:b0:4f:06:1c:d4:53:b7:c9:9c:61:8c:a1:
16:4a:fd:c2:45:ac:fb:34:cf:80:32:6f:a2:ce:06:26:80:39:
29:eb:2e:3d:2d:43:fe:9e:ed:99:ca:73:b1:d7:b4:ef:a3:f8:
2c:61:01:e3:61:36:75:15:85:40:46:f2:09:f9:10:ec:42:dd:
2e:94:76:e4:1b:c3:8d:1b:5a:9b:87:d5:08:a7:dd:d4:2c:19:
aa:75:45:f6:0d:a8:c7:82:77:8d:63:86:24:50:58:97:9e:1a:
27:58:02:4d:49:f2:6c:05:de:f4:03:cd:ef:fa:c2:ef:9b:63:
2b:9b:7b:44:17:13:7e:d7:3a:6a:45:5a:5a:0d:43:31:bf:0d:
f6:9f:fc:da:5e:0a:7c:b8:01:59:19:51:d7:bd:2d:c1:9c:ae:
0d:cd:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:42:41 2025 by rpki-client