Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3285a868-15ba-301e-a065-94ff64051e2e.roa
File: 3285a868-15ba-301e-a065-94ff64051e2e.roa (raw, json)
Hash identifier: qEpjhg8/QXKZ2nJ6l0gMIEWaCDkB2M388dF4FXYYDsg=
Subject key identifier: 7D:44:74:82:EE:24:9A:D5:A7:24:8C:9A:2E:FE:48:9F:FA:9C:00:DB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A274DCD09F6DE0918C6E280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3285a868-15ba-301e-a065-94ff64051e2e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.224.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:4d:cd:09:f6:de:09:18:c6:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c8eb0ec2-991c-4142-bdb6-95feba14fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:2b:bf:2b:28:cd:7e:2d:49:52:ef:d8:6f:
78:3e:3a:cb:90:97:24:a7:7f:d6:2c:64:34:5e:14:
3d:0f:c6:2f:bf:05:12:2d:10:4b:5a:2b:29:49:ce:
21:62:0b:7e:b9:ec:26:14:39:0e:e2:f6:54:f7:19:
c0:41:d3:c0:9f:b7:d9:e6:5e:38:c8:56:a4:9c:c1:
ef:ce:76:bd:88:7a:48:53:50:13:42:3c:7a:2c:68:
27:1c:cf:d8:eb:36:f1:85:bd:68:bc:a6:da:1e:91:
48:0e:86:e8:90:8d:49:f8:1a:04:26:77:a8:2c:2e:
92:71:b9:33:9d:db:17:30:51:90:95:4b:81:43:1c:
57:e9:63:2b:d8:4c:4e:57:13:7e:eb:cf:80:5a:e1:
07:29:9d:be:61:af:8c:ae:0d:c8:04:58:b0:18:5c:
cb:0b:72:42:bd:a3:e7:9d:55:e9:d4:24:ec:d6:7d:
59:86:5f:78:17:36:21:08:35:12:0c:e7:c4:70:4b:
39:b9:19:06:da:81:cb:9f:90:ab:cc:84:c0:48:b9:
35:67:75:39:c2:ca:33:6b:7d:6c:bf:eb:a8:33:95:
c9:28:06:67:52:05:cf:82:64:4a:a4:6b:9f:e5:4b:
cc:15:55:41:d5:44:c5:f9:7e:d6:1a:38:62:f9:5d:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:44:74:82:EE:24:9A:D5:A7:24:8C:9A:2E:FE:48:9F:FA:9C:00:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3285a868-15ba-301e-a065-94ff64051e2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.224.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:af:cb:51:70:58:e6:e6:31:71:dc:60:57:a0:48:b6:1a:f1:
ab:7f:72:84:91:99:1a:4b:0e:50:5c:f9:61:26:b2:50:9e:6d:
1d:ce:ae:ac:cf:47:9a:73:8d:6f:87:50:29:29:53:a6:26:d5:
95:77:5a:45:c4:f3:c2:f1:be:35:3a:f1:9e:52:c1:e6:fc:95:
29:9a:62:13:82:b3:4a:d1:8e:a8:7a:52:a3:46:eb:b6:46:fa:
4b:25:31:e0:20:57:42:e4:80:76:21:ff:a9:47:f3:1a:bc:f7:
3c:1e:63:66:80:21:9c:d6:e4:2d:c5:aa:58:1b:b0:da:05:12:
a9:9d:04:34:0a:76:da:6c:4c:f7:1e:c9:69:59:d0:3d:e7:47:
3f:8f:30:bb:6c:29:f9:b2:f7:af:53:83:11:eb:6f:97:e3:30:
d1:da:e3:d8:50:6b:68:0e:dd:15:9f:42:8b:30:81:7d:13:3d:
5b:da:c2:86:aa:2e:14:e6:17:94:4a:96:58:6e:27:7d:a9:bb:
cb:9c:59:22:7c:a6:e5:3d:57:27:06:f0:0b:a6:ab:b3:30:f0:
ad:6a:45:20:7c:85:21:38:83:85:1b:66:e5:50:88:10:a6:72:
66:54:35:cb:f0:eb:1a:29:83:fe:5f:69:d8:1e:0b:99:12:44:
29:3c:27:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:17:03 2025 by rpki-client