Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3905730f-3a02-3574-a417-74cf15105934.roa
File: 3905730f-3a02-3574-a417-74cf15105934.roa (raw, json)
Hash identifier: D/bgLVvkRM83wNrV0q1yX+WEsHszkNKvr0qdvLtGb4w=
Subject key identifier: 51:B8:30:B5:1D:C1:FD:3A:B1:B8:76:95:41:8D:95:3E:3E:B3:D2:74
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A24930D3DF4576669F30880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3905730f-3a02-3574-a417-74cf15105934.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.247.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:93:0d:3d:f4:57:66:69:f3:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=161b9c00-9143-4927-b914-355ac2d73e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:af:63:35:a7:34:a4:4a:b5:ba:d4:f6:40:
5e:43:79:a8:04:a8:b3:b2:2c:43:30:ef:02:46:92:
f8:7f:8d:6f:f4:a3:7b:3d:30:56:1a:b5:bf:e3:c4:
b0:8a:45:e6:40:ce:e5:25:0b:ee:34:53:11:81:96:
d5:a2:5c:0e:b6:53:7f:9e:fb:03:c7:e5:ca:f8:52:
90:ba:4d:08:6c:b3:43:a9:a2:62:7d:ca:3f:47:28:
28:47:9c:61:92:cb:8e:6f:8c:7b:07:50:b3:44:a4:
1f:99:16:74:ae:05:b9:29:ab:9a:9e:13:db:50:4d:
f9:3b:d2:8a:2a:eb:e3:e6:85:74:5d:eb:5e:e3:9c:
c8:b7:60:0b:bf:e2:05:db:bc:31:a8:77:f8:03:36:
1d:e1:65:15:1c:d2:10:6d:d7:78:c7:33:d5:aa:af:
b9:df:df:7c:b3:3b:89:aa:8b:8e:13:57:60:ae:1e:
a8:99:4e:bf:78:11:0c:e9:16:71:37:5b:1f:3a:36:
d7:d5:c2:e1:a3:05:ad:83:34:0c:69:ae:78:8b:4f:
75:ba:ac:29:31:ed:9b:11:19:bc:fb:c7:48:8a:db:
07:3f:48:c9:cc:50:c0:96:d8:6b:3b:3a:e1:1d:b0:
2f:4c:1d:84:5a:cf:a3:a9:67:8c:8c:87:db:4e:89:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B8:30:B5:1D:C1:FD:3A:B1:B8:76:95:41:8D:95:3E:3E:B3:D2:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3905730f-3a02-3574-a417-74cf15105934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.247.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a6:e9:79:6b:5a:b7:6a:92:67:82:4a:6d:af:31:b6:06:5d:
0e:18:96:15:f3:a5:b6:77:a7:13:ff:05:57:a2:42:f2:93:b4:
92:6f:14:3d:bc:ca:1e:a0:11:d0:95:bf:46:a8:14:bc:eb:ee:
3b:e3:5c:a9:a1:2f:b6:8a:74:58:f0:6b:2c:2a:d4:18:4f:a9:
a1:69:a7:2a:21:47:ae:d6:6c:1e:47:c0:ce:76:ef:50:d0:f5:
30:70:44:a0:3b:a3:05:44:5b:7d:a8:d0:ac:6b:8b:a0:a3:34:
d6:d3:0b:49:ea:c5:4f:a9:5d:5c:74:3f:5a:a9:f5:c0:de:d9:
64:3f:6d:e6:dc:aa:a2:f4:16:50:7b:eb:a3:70:08:ea:16:26:
75:b7:c3:66:1c:ec:8e:e7:a4:6d:5a:b2:f6:3d:44:07:ec:bf:
22:70:d7:89:35:24:8b:23:17:d2:6f:2d:c9:e3:0a:9b:54:d4:
79:0b:9d:b9:58:95:d1:cf:e3:11:10:84:ce:4b:bc:ae:b4:5a:
23:05:22:20:9f:62:57:c7:fe:b5:be:2d:c3:aa:48:c6:30:4c:
eb:03:93:1f:ae:5e:89:07:d9:be:c0:bf:d1:f0:a9:6f:f2:a6:
12:9a:63:9e:76:cb:ec:93:6a:fc:af:9b:df:31:91:61:63:f8:
c9:a4:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:37:23 2025 by rpki-client