Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17f0c462-5b4d-3210-9fc5-6fd520b6fb0a.roa
File: 17f0c462-5b4d-3210-9fc5-6fd520b6fb0a.roa (raw, json)
Hash identifier: vbJAfC1+gvpqCqgAn0VZgQLmzKWYGlW/H5pmCyPPCYg=
Subject key identifier: 16:F5:73:C2:7E:B0:F3:82:2B:C6:F4:42:34:27:C8:74:45:FC:CE:88
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A090A086F17E806213F7B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17f0c462-5b4d-3210-9fc5-6fd520b6fb0a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.241.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:09:0a:08:6f:17:e8:06:21:3f:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5cdc0dcb-89f3-45ca-8205-cfca52747a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:11:06:b8:7e:47:8a:d1:41:86:2d:62:ab:
50:3c:3e:a8:a5:3c:fc:c0:ed:a2:f5:b9:68:61:4d:
25:83:d9:22:b2:3b:ae:70:e8:a1:5d:e5:45:3e:62:
f0:bc:32:bb:4f:f5:1e:d1:84:26:63:f5:07:00:38:
e2:75:42:e0:19:1a:d7:36:cb:12:57:c6:48:98:8c:
1b:f8:0b:fd:5e:de:55:c7:07:1b:ff:4a:0c:4e:26:
d6:24:99:49:4c:bd:ca:ff:da:6b:62:20:d0:5b:f5:
c0:09:34:06:f7:4a:09:dd:e0:1e:91:42:3a:01:6e:
69:7e:3d:05:7a:03:af:d9:b2:e6:0a:84:e2:59:75:
8e:1e:3e:0f:a4:fc:01:4e:5f:77:82:77:cf:9e:ce:
18:7b:43:98:a4:30:bc:a3:78:60:0c:7f:6a:55:bf:
d8:f9:d7:73:d0:56:69:a0:4f:c0:32:22:1d:b7:9a:
59:35:71:8f:82:c7:18:ce:2f:ab:6d:a9:97:4f:ae:
36:69:9e:3c:c2:2b:a1:bf:66:4c:5f:25:0d:34:ff:
62:81:7f:99:be:27:e5:07:73:9d:42:94:26:31:f6:
10:fa:b8:87:6a:3c:8d:23:6b:34:b1:b7:da:04:48:
dd:80:fa:d0:c2:03:07:ef:5c:51:df:4b:40:ff:cb:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F5:73:C2:7E:B0:F3:82:2B:C6:F4:42:34:27:C8:74:45:FC:CE:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17f0c462-5b4d-3210-9fc5-6fd520b6fb0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.241.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:0a:71:cc:7a:a7:51:11:ac:f3:a9:7c:27:de:77:89:ea:ea:
4d:33:f5:f5:35:82:3b:9b:84:a7:d4:c6:d0:1d:08:b8:b1:4c:
35:26:b9:c1:10:f8:a6:b7:04:8d:c5:6d:b0:e7:73:66:8a:5a:
7b:63:40:6f:4e:d9:77:10:6e:32:3f:25:bf:64:99:42:69:10:
d9:5e:93:c5:be:20:29:41:17:c3:cb:29:fc:1b:bd:db:ca:9e:
49:1a:8f:c4:12:6b:df:96:d3:11:d2:25:6e:c6:db:3d:44:b0:
56:0b:43:a9:c4:b4:bc:6f:cf:4c:1f:b0:64:dd:b5:b9:6d:d0:
06:6a:57:31:81:79:c5:e2:f9:59:d5:9a:f5:ac:dd:99:bd:ac:
9b:6c:e7:e0:9c:12:61:99:d2:e9:61:54:d8:20:2e:b0:6d:d2:
5f:62:c8:08:c0:43:17:83:44:69:32:ed:a8:51:96:d3:bc:d4:
eb:95:20:31:e5:f4:37:ba:f1:de:b2:b3:cd:a0:61:63:a9:6c:
69:2a:c3:91:70:42:ea:59:73:f2:80:86:bd:1d:7d:6c:e5:e7:
e0:70:56:05:5c:67:40:57:3b:79:d0:91:57:0c:88:d1:5b:70:
f9:86:c4:8a:8d:37:67:cf:e5:fb:6e:11:81:ad:63:29:23:2d:
19:54:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:55:08 2025 by rpki-client