Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b3d810d-1a44-3131-8b21-8083bddfd82a.roa
File: 2b3d810d-1a44-3131-8b21-8083bddfd82a.roa (raw, json)
Hash identifier: Tm9P1Q7TGB4mx+daE87y3c2xCdGaoTQW4GzDdtP2hOU=
Subject key identifier: 77:BE:6A:47:AF:20:1E:EF:30:25:22:77:12:8B:4E:42:00:F7:35:5A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B064FF71CDF0743A37B00280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b3d810d-1a44-3131-8b21-8083bddfd82a.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.236.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:64:ff:71:cd:f0:74:3a:37:b0:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=2b2501cb-5d63-407b-96c5-95bcef613a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:6f:0f:f8:27:47:fe:c7:d1:a1:1a:89:89:
cf:21:46:22:f4:1a:80:a8:a0:c6:13:0b:48:68:d1:
2e:9a:12:07:3e:58:a7:d8:b1:40:82:65:bd:bc:74:
aa:fb:df:cd:f4:d9:21:26:b3:3f:58:3b:3a:94:6c:
21:f1:47:79:4c:1c:be:d2:41:e3:5f:63:da:0a:2e:
0b:41:35:91:ef:cd:8e:9e:16:e7:8c:c1:03:7b:29:
a3:c8:e7:51:8a:f7:98:7a:50:33:98:e8:6b:f0:94:
ae:b5:58:8d:8c:12:3a:04:09:d9:d5:9b:17:74:92:
96:80:dc:2b:32:7f:fd:b1:ed:b1:8d:ee:27:62:10:
3e:3f:bf:3b:a3:02:56:16:54:19:1f:39:22:5a:36:
f7:64:3f:97:1d:ab:b6:2f:b3:ad:11:d6:c9:d0:e2:
96:d3:7f:bc:7b:80:06:71:c4:29:39:b9:b0:70:f2:
ed:94:ee:8c:37:9e:a9:0c:19:d2:95:f3:a2:96:0c:
d3:4f:8e:fb:ab:26:e4:e3:35:ff:94:7c:cd:f9:11:
bc:17:77:71:cc:01:19:57:a4:f2:87:78:53:d2:44:
94:21:bc:0c:78:45:eb:56:23:b4:d7:02:50:ed:0f:
88:45:cd:86:93:23:0c:09:c3:76:dc:31:ce:80:b7:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BE:6A:47:AF:20:1E:EF:30:25:22:77:12:8B:4E:42:00:F7:35:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b3d810d-1a44-3131-8b21-8083bddfd82a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.236.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:0c:7a:5f:37:3d:ec:42:fe:88:3a:25:f5:b1:bc:99:08:8c:
1b:f5:b8:b7:d7:ef:45:43:5d:94:c0:b9:87:c5:5e:e5:67:42:
2b:12:8a:4c:e4:d7:d8:0b:cd:8d:81:64:cf:f0:16:00:31:ca:
bc:f8:fc:e1:44:b4:fe:6f:8f:bd:17:82:a2:9c:84:5f:91:34:
f5:da:a3:15:56:ab:be:6f:6c:a7:47:31:8f:b5:1f:8c:b5:3e:
af:c4:e8:d0:2c:2d:35:2d:db:ad:7a:24:64:31:5f:bb:21:3f:
1f:fb:87:eb:a4:5a:e9:32:24:08:8f:87:95:ad:5a:ab:2e:72:
4a:89:01:f6:a0:e1:99:e9:54:db:63:0e:81:7c:c2:d3:cf:a5:
c0:e6:5e:4c:48:fc:e3:66:f1:9a:0d:4b:2b:b7:0d:23:a9:7a:
bb:f2:46:93:c3:c4:a5:6c:cb:89:ae:03:3b:6e:68:4b:83:2a:
87:4d:ce:03:d6:92:81:c8:b4:3e:6a:b0:4b:8d:f8:6d:10:57:
32:5e:c5:c0:51:18:c5:15:01:66:18:a2:fc:be:09:e2:e4:70:
0d:9e:cf:a6:1d:39:bb:81:3f:c3:ee:0f:d9:ac:db:b2:30:fa:
43:ba:39:56:f5:21:ae:45:bd:96:5a:e3:2a:6a:1e:1b:ef:73:
9d:58:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:27:05 2025 by rpki-client