Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35bd6b5b-459a-38e0-a6d1-bb27f6f6542f.roa
File: 35bd6b5b-459a-38e0-a6d1-bb27f6f6542f.roa (raw, json)
Hash identifier: zHcn7Yttipiwayp+qIuFtBowpqB3I3wYtGKsJH2wfRU=
Subject key identifier: 96:20:08:D9:22:74:7B:72:60:34:4C:1F:FC:AD:EE:90:7E:AC:CF:93
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1407A28A09E766C5BCF980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35bd6b5b-459a-38e0-a6d1-bb27f6f6542f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.245.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:07:a2:8a:09:e7:66:c5:bc:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=134bf80a-0da4-44e2-acdf-d79a1b3a5fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:f5:06:3a:d5:e1:70:77:8b:f4:1a:87:eb:
6f:aa:a9:3e:04:9b:61:17:dd:06:24:ee:73:c9:0d:
fe:94:ee:54:d9:f7:64:c6:c3:fc:dc:7c:21:7b:1a:
91:0b:70:aa:10:1e:8d:c6:a7:a6:04:7f:04:84:71:
b7:96:8b:d5:97:8e:20:c6:4d:f1:ea:db:90:d8:6c:
2c:d7:7a:d4:d5:c8:9d:ab:41:46:d0:27:9b:8b:29:
6b:21:8c:62:1c:e5:88:29:b2:30:4b:48:2a:dc:a4:
07:21:ef:65:3e:7a:1b:1a:9c:f5:28:44:88:86:75:
5b:0a:0c:43:dd:51:08:52:06:a1:fc:4f:1a:70:c3:
48:b6:24:4e:0a:ba:0c:73:d2:35:9d:90:8e:e7:dc:
06:78:9d:4e:f2:a6:2f:be:da:41:0c:34:36:4e:9c:
12:28:27:14:f6:ae:5c:91:3c:1e:22:ed:a6:08:24:
bc:12:e9:bf:f6:eb:c5:da:f1:70:b3:65:11:b9:33:
2c:06:ba:90:ba:4b:ca:77:05:50:3e:13:a2:58:74:
57:62:6f:70:7e:8e:5e:19:bd:ad:6a:6b:5c:a2:78:
77:c4:15:bc:26:c5:32:8a:9e:fa:49:d2:c0:8e:9a:
62:ea:cf:34:b9:17:8b:35:1e:a6:49:3f:e2:11:5d:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:20:08:D9:22:74:7B:72:60:34:4C:1F:FC:AD:EE:90:7E:AC:CF:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35bd6b5b-459a-38e0-a6d1-bb27f6f6542f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.245.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:89:c2:45:97:90:85:68:a1:1e:52:c7:fc:8c:a2:7a:d3:c2:
91:fe:3c:01:06:37:a5:67:20:74:95:dd:f7:c2:ab:96:8b:bf:
07:f6:d5:22:cf:0a:92:08:b3:b2:25:a8:db:26:5d:3c:b9:ff:
bc:86:26:a8:ad:a0:5b:23:9b:18:4c:22:00:d1:6d:3b:06:f1:
62:f7:2e:f3:ed:e9:bb:72:cf:60:67:d9:e3:be:21:e9:79:07:
a6:86:95:96:dc:b4:c6:da:a5:53:e2:48:0a:2e:93:e1:f7:10:
e0:9c:36:2c:fe:ae:12:cf:9d:61:7c:8e:ef:60:cc:7f:43:49:
03:63:4f:a8:22:3a:86:d4:30:19:4d:40:43:7d:dc:fc:1a:f0:
c6:37:d0:3d:d2:e7:24:1e:fd:f8:1f:ca:49:b4:57:8b:82:48:
c8:c6:fa:a1:35:9d:65:3d:a9:a2:d6:1c:4e:dc:c9:45:d5:e8:
4d:c1:cb:0b:4e:93:d2:6f:1f:fe:f6:f3:9b:74:aa:7b:3a:97:
b7:54:81:1b:d4:fc:df:a5:a4:e7:fb:78:32:de:14:d4:df:3f:
64:ec:61:56:91:92:00:42:cc:35:3e:86:12:0a:21:17:1c:c6:
1a:f4:e0:4f:9a:3e:a8:2f:40:24:84:c5:c2:52:37:86:de:b0:
56:1b:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:33:44 2025 by rpki-client