Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4092b078-1a83-35b3-8b21-6b7bb67d14bd.roa
File: 4092b078-1a83-35b3-8b21-6b7bb67d14bd.roa (raw, json)
Hash identifier: u5aic+qvYpVRAqJhTcX5LWqG8VRB/c+iADmF5uzUsR8=
Subject key identifier: 11:03:11:70:43:D2:96:EA:00:9E:11:45:DC:70:AC:BB:A9:BB:B5:17
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F1F4C9BAD74E13F8B58200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4092b078-1a83-35b3-8b21-6b7bb67d14bd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.238.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f1:f4:c9:ba:d7:4e:13:f8:b5:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=89d2b576-ccc7-4edb-9f9f-fd0e9f4c5e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:61:3d:74:ef:42:38:7a:09:8e:ac:f5:ac:85:
19:8b:a0:e7:30:69:06:bd:aa:04:8a:21:03:ee:59:
2d:fb:47:a8:8c:c7:28:be:77:6d:11:14:e7:5a:11:
4e:f2:d1:a3:ba:bf:0e:73:2f:e4:05:37:98:81:ca:
ad:92:b0:7d:d7:5b:ff:3f:3a:c1:8f:a0:b0:8d:29:
9e:e3:31:bf:dd:17:ac:ed:fe:c6:2a:5e:58:c5:47:
c4:76:b8:37:0f:18:02:cb:3e:a2:2a:b5:f0:c0:02:
14:72:2f:9a:b2:b8:83:6c:d3:d4:a3:be:26:cc:fd:
c2:84:68:79:0c:8e:c1:69:93:4c:92:37:9e:d4:38:
59:f2:54:dc:ad:42:d4:9c:96:d9:43:7e:4a:e8:33:
95:1d:24:f1:1e:69:9b:2f:48:1f:8b:99:3d:db:a9:
52:e9:a2:11:e6:36:09:58:fe:ab:e6:65:39:10:c3:
c0:53:fe:12:f6:e0:a8:b1:c7:fc:72:04:a6:42:8d:
da:0a:2f:09:bd:c0:e9:3a:c1:7d:11:bc:17:00:82:
24:c4:30:52:66:db:c5:74:82:dd:a2:40:45:b7:1a:
48:3d:b1:67:41:de:06:35:87:ac:2e:2a:7d:fb:a2:
ab:3c:a4:fa:2f:57:fa:ef:b9:15:d4:bf:d8:2c:da:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:11:70:43:D2:96:EA:00:9E:11:45:DC:70:AC:BB:A9:BB:B5:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4092b078-1a83-35b3-8b21-6b7bb67d14bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:43:a0:7f:ed:47:bb:ee:6e:f6:73:d9:a3:fa:52:f3:8e:81:
b5:c2:5b:cd:bc:a4:81:8b:e6:08:73:5f:e7:ec:d6:5f:36:fe:
88:6e:98:2a:d1:f6:bf:a8:3f:26:c7:5c:55:a8:30:85:79:33:
9a:8d:bf:a8:62:13:16:83:c1:8c:43:f9:c2:f7:c5:da:70:4d:
9f:21:d5:fc:0a:2b:de:ee:90:41:ee:fd:b1:33:71:ee:a4:2b:
9e:7a:fe:9c:c7:99:68:0f:02:98:57:7b:65:01:d0:bb:be:41:
a2:de:a3:c1:d1:2c:23:93:ac:d2:b0:c3:f2:d9:fe:25:04:fe:
91:84:27:59:63:67:de:41:16:c0:bf:60:27:19:18:ec:7f:9e:
14:06:ab:ae:08:d4:a9:90:f9:46:65:7f:1d:9d:a6:49:ae:82:
74:9a:3c:cb:88:7f:02:74:66:a1:c8:8d:61:77:c9:89:37:fc:
64:60:42:1f:6a:3a:38:f1:f5:4b:39:0b:56:d5:c1:c8:85:c0:
2b:bc:a4:fc:1b:d5:7e:20:35:65:b7:98:fd:63:5c:61:3c:6e:
9d:c2:1f:40:1f:df:ec:79:1c:50:7f:df:8f:ea:5d:00:8a:90:
a1:4e:c3:4a:a3:30:a2:63:22:c8:7c:f6:10:50:c8:0a:fb:f5:
ec:17:c0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:02 2025 by rpki-client