Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c0df4fc-fcb3-3b9c-90e3-05106cc37e84.roa
File: 3c0df4fc-fcb3-3b9c-90e3-05106cc37e84.roa (raw, json)
Hash identifier: dyxSw8qHhJgYothcxpnZBqgdvfQRcLL3o+kq+zKijU0=
Subject key identifier: F8:C3:A8:63:97:8E:D3:B0:0C:2E:01:BC:3A:88:06:E9:06:08:91:75
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309ED90C3C5C026F969EAF080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c0df4fc-fcb3-3b9c-90e3-05106cc37e84.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ed:90:c3:c5:c0:26:f9:69:ea:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bdbd3578-2b02-43db-8db4-58c2fadd5edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:56:d4:2f:ea:f1:fe:f9:3b:2c:ec:e2:c7:
b3:ab:b7:21:87:38:f3:c0:53:04:d3:b5:f8:d8:24:
3e:2c:79:1e:6b:85:c3:4d:99:88:ed:cf:d5:0e:6b:
47:44:cb:92:46:66:cd:26:46:65:00:3b:15:6d:1d:
a9:32:68:d2:ca:78:4c:29:01:bc:73:e4:6b:37:ef:
e7:42:07:8f:02:8b:c1:dc:3e:43:20:b2:d6:2d:84:
c4:6a:80:6f:02:59:aa:7c:22:10:f2:2d:84:bd:9c:
fa:f4:29:52:0c:85:46:29:22:38:72:04:e8:35:28:
19:74:d3:c7:c1:29:f6:c5:a5:25:a4:e5:3e:72:ba:
fc:e0:80:2c:38:ef:c5:79:8e:91:54:35:1c:99:29:
51:da:29:cb:9a:a3:2a:78:3e:41:32:a1:61:bf:7e:
8e:9e:88:b1:d1:0a:b4:75:30:61:1f:28:ab:06:c7:
6e:81:f3:df:f5:48:5d:02:04:92:86:41:dc:ab:a8:
72:ac:ab:a8:73:f3:bc:c0:f1:e3:e1:7a:ff:2b:c7:
e2:b1:f5:a8:c3:8d:4c:02:f8:45:d8:9a:47:e2:b4:
b5:22:58:28:9d:a6:a3:4d:9b:ec:62:cb:fc:fd:7f:
46:9b:2c:a7:e7:26:b4:2d:fe:cf:cd:f0:e2:f1:a2:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C3:A8:63:97:8E:D3:B0:0C:2E:01:BC:3A:88:06:E9:06:08:91:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c0df4fc-fcb3-3b9c-90e3-05106cc37e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:05:f9:20:89:49:7e:0b:26:44:26:7c:d7:c6:25:bb:64:9c:
cb:20:e1:54:b6:f5:d6:46:b4:f8:39:3e:8f:6d:14:0b:11:4b:
62:4f:79:ab:60:11:af:57:02:13:27:ee:1e:f1:ab:82:59:dd:
56:b6:31:8c:8f:2c:b2:08:9a:f1:77:b5:94:54:10:1c:87:f2:
7e:af:00:26:e9:80:59:d0:ad:bc:14:cb:ff:96:52:7b:76:8f:
77:16:72:3b:59:ab:14:07:b2:71:7e:f6:ca:be:0e:52:f4:e7:
3b:4c:75:80:31:91:1b:cc:4b:02:75:be:71:fc:84:32:56:77:
96:e8:89:22:19:c1:f5:c9:bb:e9:df:ba:91:7e:6a:6c:30:54:
ed:93:52:3f:72:d8:0c:c6:b8:33:41:a0:76:ee:a4:88:65:e3:
2f:0f:e0:55:4e:ee:41:cc:f9:21:d2:a9:33:1b:e5:fe:29:53:
f9:e1:5f:5a:75:69:31:13:91:73:1e:18:be:d2:cc:f6:0a:64:
81:77:5a:d6:6c:5a:c8:3d:03:45:b5:44:32:6b:75:35:f7:24:
62:30:2b:68:72:b8:d9:59:43:9c:d3:66:61:3b:b5:55:71:d3:
f7:a3:d9:d9:bc:8a:94:5d:59:2a:9d:6e:8e:f6:b8:38:0c:55:
23:fc:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:28:29 2025 by rpki-client