Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/229e12c0-27d9-3f7a-8eed-79748a45ca91.roa
File: 229e12c0-27d9-3f7a-8eed-79748a45ca91.roa (raw, json)
Hash identifier: i+2Wwt+c6Noapnq1zR/d+9qiIJjJYd330Q8Y9ZYnpc4=
Subject key identifier: 9F:20:16:B1:10:62:20:09:8B:FC:87:CB:13:40:25:72:93:AE:89:85
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285840CAC501140A18118F5333D800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/229e12c0-27d9-3f7a-8eed-79748a45ca91.roa
Signing time: Thu 02 Feb 2023 12:00:00 +0000
ROA not before: Thu 02 Feb 2023 12:00:00 +0000
ROA not after: Wed 07 May 2025 04:00:00 +0000
asID: 396982
IP address blocks: 35.200.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ca:c5:01:14:0a:18:11:8f:53:33:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 12:00:00 2023 GMT
Not After : May 7 04:00:00 2025 GMT
Subject: CN=d639ca6d-4e5a-4541-b6fb-c903b2a38b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:35:0a:4b:7e:43:fc:3b:7e:74:c6:59:14:
b8:f6:4b:0b:80:2d:2d:81:6c:6c:c0:17:e8:9f:85:
4f:f0:d7:f0:76:16:f6:9f:ab:a5:a5:96:c4:60:55:
2f:35:e8:1b:0e:57:16:75:1a:1a:c2:c2:e7:ac:f0:
fe:c3:f9:59:c6:fd:35:87:e4:c4:76:6b:cc:93:37:
b9:41:5e:8d:42:75:66:52:cd:d5:8d:98:1c:b4:0b:
90:e8:35:71:c2:d7:d5:4c:c7:ad:ba:ed:be:3f:df:
58:f0:ac:f0:d0:a3:6d:99:aa:6f:d7:b6:0b:be:a1:
36:ef:82:3d:d8:6a:2d:5d:cf:0b:a5:57:17:8d:5c:
ce:7a:19:71:33:23:5e:b0:ea:45:02:5d:4e:db:b8:
26:21:c9:86:d1:35:93:d7:e7:22:6b:e4:63:84:0e:
1a:e1:ec:a8:54:b3:25:d7:48:be:cd:d7:dc:88:89:
7e:74:f1:68:f0:99:dc:c2:5e:7e:98:3b:39:9c:cc:
88:a8:bf:36:a9:b2:e7:55:dd:51:76:58:5e:4c:90:
95:9f:0f:99:74:ed:b9:46:1c:55:81:dc:47:4f:ef:
a2:ec:15:46:f7:f1:19:f6:a4:30:e2:88:dc:0d:33:
47:3c:7e:ec:40:a6:c1:25:3e:67:d6:62:1a:6f:66:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:20:16:B1:10:62:20:09:8B:FC:87:CB:13:40:25:72:93:AE:89:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/229e12c0-27d9-3f7a-8eed-79748a45ca91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.200.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:ce:ae:26:66:ed:3b:79:77:f6:dd:03:a6:2e:ca:44:a8:01:
27:2a:01:d2:6f:4a:62:40:77:6a:b4:73:74:9c:a2:57:c5:5c:
8b:b2:93:10:99:f7:33:a6:21:da:03:22:11:44:e8:d2:23:96:
d1:e1:1d:5c:1d:d4:2a:aa:e7:6e:e5:a7:e8:81:d4:0e:25:ce:
86:f4:a5:3a:34:9d:4f:5c:74:38:0c:6e:1d:59:ed:7e:9d:7c:
e0:21:97:4a:f2:a7:23:01:61:2a:e7:f1:a5:ab:f6:9d:ff:36:
e9:50:1e:2c:f2:c1:bf:6b:c7:ef:ab:70:c4:1d:c3:a1:3d:03:
d1:ec:de:8e:29:e5:48:f2:9b:1d:9f:67:aa:ea:d6:78:4f:85:
e4:6c:c6:db:99:7c:fa:2e:83:92:14:81:27:ac:73:be:2c:d8:
96:7b:62:91:d8:7f:76:e9:67:cc:52:c8:96:3b:f9:23:97:88:
98:a5:28:fe:a0:e2:0f:59:22:1d:e8:09:76:25:76:8a:e5:a2:
c8:ea:84:e4:53:3f:b4:c5:11:9d:d6:ef:c1:e0:99:16:ce:77:
d4:ef:69:30:fc:07:e1:53:19:66:dd:c6:f1:b2:58:59:10:26:
0a:ef:b8:0d:93:1a:68:c7:9d:74:d7:d0:c5:f0:54:77:7f:10:
43:a2:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:12 2025 by rpki-client