Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c6ea5d-7190-33d0-bd1a-09c3b2c28feb.roa
File: 38c6ea5d-7190-33d0-bd1a-09c3b2c28feb.roa (raw, json)
Hash identifier: TSVO3fFuvxQ1y9cvbqiSesy0w/XTOtSmJHkRXyOgeag=
Subject key identifier: 91:66:38:9B:B8:4F:68:B5:98:C7:53:AE:0C:EE:B3:4A:56:BA:EA:BB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F7DA92419327F3134FD800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c6ea5d-7190-33d0-bd1a-09c3b2c28feb.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.240.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f7:da:92:41:93:27:f3:13:4f:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a4b440db-4bba-49e1-9aae-aaadd3fc61f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:c0:ce:ff:a0:50:b2:f5:97:a6:3b:8d:88:
ee:22:0d:79:dd:34:bf:75:2d:20:ca:2c:c5:27:c4:
90:c0:36:53:55:81:34:e1:13:e4:63:57:a8:a7:5e:
92:44:15:38:40:6b:ac:0f:c2:2f:2e:c4:3a:fd:e9:
96:8b:4b:ba:42:eb:07:74:e2:af:31:b2:ab:58:24:
34:89:80:ce:0e:de:bf:10:9b:70:fc:b0:68:9e:6f:
dc:43:00:cc:1d:3e:f9:fb:9d:72:00:5c:88:8d:be:
46:30:04:4e:f9:df:d3:9e:a0:4f:b2:f0:f6:6f:d2:
04:c4:fe:f8:a5:18:bb:07:a5:43:0a:bc:55:aa:6c:
0a:2c:40:6f:4a:a5:2b:27:3f:06:c4:a8:d6:19:a2:
0f:6d:e4:87:50:bb:82:98:4b:81:58:a7:11:f7:98:
d2:c1:3e:42:e6:9c:d3:45:f2:29:f4:4f:fd:8f:9b:
e7:bc:b2:af:a3:13:5f:7b:e4:30:02:1d:79:43:74:
8c:8e:a7:aa:d8:82:9c:80:ce:16:49:91:e4:8d:21:
7a:05:60:20:e1:9d:eb:34:ea:c4:7b:15:ef:6b:de:
35:4e:1a:f7:4a:44:ba:4c:d9:a5:bc:35:79:72:54:
d8:5f:8b:35:75:67:05:4a:e7:1b:08:8d:ef:58:51:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:66:38:9B:B8:4F:68:B5:98:C7:53:AE:0C:EE:B3:4A:56:BA:EA:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c6ea5d-7190-33d0-bd1a-09c3b2c28feb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.240.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:b0:c1:0b:8f:47:99:9a:ad:24:82:27:b5:f5:e4:c2:2d:59:
03:85:44:79:6a:2b:48:29:7d:40:2c:5a:70:97:d3:7c:82:5f:
ff:49:c6:70:a6:f7:65:e9:f2:22:e1:76:d2:80:ca:13:8d:fe:
b7:f4:e9:5c:e0:5f:6b:9c:51:83:92:e7:a2:fa:a4:6b:14:de:
13:96:df:49:8f:34:15:c6:1a:f9:18:b2:a2:c4:f2:fd:9e:d7:
9c:d6:f1:9f:08:cb:53:81:86:f5:94:2b:51:22:64:0b:3e:69:
ef:28:f6:65:e0:51:21:4c:25:a7:84:d2:32:c3:1e:20:75:e8:
0e:07:8b:d5:88:34:84:60:6f:9d:c8:2f:08:83:c8:cc:2b:59:
a0:22:3b:71:99:60:ef:40:dc:a1:f5:6f:40:24:5b:d4:6a:89:
00:93:5e:d2:26:36:80:ea:2e:8e:64:90:21:1a:49:bb:09:46:
2f:b5:08:c6:f7:f2:47:01:5f:aa:06:00:73:cc:8b:a2:a8:ba:
cb:84:d1:b0:05:bc:93:d3:0b:f1:a2:9c:8d:0e:2a:2c:2b:2c:
1b:e3:48:7e:41:a9:79:19:42:6e:65:94:bc:e6:04:d8:ce:39:
1f:9f:fc:b1:c8:bd:69:20:c7:b5:f9:0c:5d:7d:d2:ea:45:ff:
18:90:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:44 2025 by rpki-client