Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fd41793-6c01-3e3a-8a9c-55c83d124bb3.roa
File: 3fd41793-6c01-3e3a-8a9c-55c83d124bb3.roa (raw, json)
Hash identifier: 6DcTDxJi+Ke7+pjQ2YuiQ88ckmTrwASPd79qLWtUil4=
Subject key identifier: 6E:E9:8E:FB:43:F3:6C:9B:C4:2A:56:2B:DD:02:10:65:B0:DE:B7:4B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A027B0E91BC82DAF3FC7280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fd41793-6c01-3e3a-8a9c-55c83d124bb3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.235.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:02:7b:0e:91:bc:82:da:f3:fc:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=05980c95-f9c8-4e54-84fa-0c802e94c5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:dd:e8:42:13:8f:04:08:7a:50:c6:46:6d:
42:e5:4d:d8:b7:43:61:13:fc:e5:da:90:73:da:76:
11:40:fa:3a:25:26:8c:a1:f7:70:83:24:29:3d:c6:
3e:03:ce:a5:65:04:32:2d:95:43:c7:a0:16:3e:94:
d4:b5:a4:67:4a:9f:f7:d1:44:26:2a:3b:6b:c7:a9:
c9:2e:33:a5:ad:d4:54:30:90:f4:56:ae:0c:a6:7f:
b7:39:ac:e5:dc:58:3d:5e:62:34:40:8f:ce:03:6b:
63:6e:e3:59:47:6c:65:04:de:e2:c1:c5:7b:be:e9:
58:03:e6:75:5f:3e:bd:8b:d0:65:4c:de:b4:cc:69:
84:61:c1:8a:00:2e:1a:49:8f:31:63:a0:da:90:5c:
da:74:51:60:94:ef:e6:59:bc:2f:fa:5d:85:0a:53:
6e:78:ef:ae:53:14:bb:af:fc:90:0b:79:3d:97:58:
3c:0c:cf:ef:0f:bb:91:35:67:94:43:a1:e1:4e:c8:
70:38:05:90:56:75:4b:90:ad:5b:a8:5b:0f:0b:54:
f2:54:15:5c:2d:0f:ef:f0:6a:19:df:b0:96:de:f5:
89:15:c9:54:38:db:cb:ca:eb:27:cc:bf:7b:29:85:
e7:ef:ad:88:2c:c1:80:13:b1:5d:ca:c1:fc:56:02:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:8E:FB:43:F3:6C:9B:C4:2A:56:2B:DD:02:10:65:B0:DE:B7:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fd41793-6c01-3e3a-8a9c-55c83d124bb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.235.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:50:8e:07:a5:99:0b:f2:6a:09:39:6a:6f:84:b0:0a:43:d3:
5e:af:ad:80:b2:b8:b4:71:9e:07:db:93:93:ee:6c:15:50:c1:
3f:d6:42:59:58:b4:2a:e0:c3:43:6b:de:83:8c:4c:82:5e:06:
3d:86:5a:ff:f6:65:0d:b0:54:44:ed:89:d3:d8:e8:7a:d5:d0:
da:c5:75:99:10:92:e4:ad:c9:c1:4b:ee:f9:f4:20:87:93:04:
64:ca:74:c5:77:ee:3b:c4:01:32:c4:34:5c:8c:99:96:7c:d4:
3d:ec:f5:ba:c8:d6:3d:26:fb:e7:ad:ca:66:7f:94:87:2a:05:
8e:bf:d9:b3:23:da:4e:b3:1b:85:0a:6c:99:01:5e:b2:0c:50:
0a:cf:97:45:40:6e:af:09:71:cb:41:c8:d7:5c:78:22:fc:84:
43:56:ba:df:33:1c:ef:77:0d:75:75:b4:39:a3:31:17:b2:0d:
2a:89:0e:8e:36:6a:73:05:df:8a:f6:de:b7:75:93:7c:12:d8:
e5:16:fc:b0:16:50:f9:16:ce:36:82:90:20:b9:e4:75:64:57:
be:ee:f1:b3:9a:30:1a:65:dc:86:0f:4b:2b:dc:44:c2:e5:21:
09:be:39:e7:89:1b:54:a8:0d:62:b0:7a:f6:85:ba:15:e5:b4:
85:0c:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:24 2025 by rpki-client