Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d912eb5-b77d-31f4-b8ee-cd717b0c72ea.roa
File: 5d912eb5-b77d-31f4-b8ee-cd717b0c72ea.roa (raw, json)
Hash identifier: 9xBwQTGtG0cvzzHU49a0g9qgZaZOU4sgV3D4xhCcldQ=
Subject key identifier: F8:F6:C5:A8:6C:25:5A:FA:99:BC:AC:62:54:44:10:07:16:42:91:60
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EF8F16DF33533ACC188380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d912eb5-b77d-31f4-b8ee-cd717b0c72ea.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.244.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:8f:16:df:33:53:3a:cc:18:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3b391e26-3770-4ae4-84dc-fe156cd7b82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:15:35:dd:ca:bb:ba:20:a3:4e:01:5d:13:
ae:3c:dd:65:21:98:20:65:87:ae:39:37:f0:c5:36:
54:ae:61:43:76:25:e9:0f:aa:e0:fb:f4:ad:da:1a:
f1:60:5a:eb:84:96:7c:38:b1:4d:e9:21:33:d1:08:
b2:e0:98:6e:cc:ad:e4:a8:84:2a:cc:26:ef:53:c7:
e5:44:db:d9:c6:1e:d7:22:26:11:0a:1e:8c:6b:81:
f2:74:06:cc:3b:87:1e:ff:50:57:f3:28:63:52:58:
65:d1:b0:a0:3b:f2:c8:74:84:9f:80:3b:3d:aa:f8:
89:b0:90:ab:e8:05:06:20:f7:38:32:55:6f:3a:b7:
f4:b6:cc:1b:40:5f:7a:6f:f9:61:0c:f2:68:8d:d4:
a1:24:ca:9a:b2:38:aa:f2:0c:d1:34:09:cc:1b:e1:
8c:97:0a:e4:3c:be:c1:f3:f8:54:94:57:a1:6f:3e:
e2:84:f4:da:81:2a:f8:dc:6c:ef:04:66:0b:df:20:
9d:a5:50:5f:5d:b2:f2:39:70:c2:91:dd:81:91:a7:
61:b7:c6:fc:7b:f9:bc:5f:c0:c5:ed:8e:1d:e7:f7:
00:c0:47:08:8e:cb:b7:44:bd:79:07:d7:62:d9:6e:
86:1a:1d:cd:d3:27:57:d0:5c:03:7f:fc:02:56:8a:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F6:C5:A8:6C:25:5A:FA:99:BC:AC:62:54:44:10:07:16:42:91:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d912eb5-b77d-31f4-b8ee-cd717b0c72ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.244.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:8c:95:51:b3:32:53:ea:fa:f3:0f:69:26:b0:90:b4:42:48:
00:cb:40:f4:25:6e:04:58:58:10:fe:66:ef:44:d2:7d:55:39:
c1:26:13:2d:fe:8d:4b:aa:4b:21:88:69:65:f0:33:c6:f7:63:
c7:93:e8:cc:65:fb:41:64:b8:74:ec:9e:cd:a2:3b:c7:f4:5c:
11:25:6e:e8:56:6b:a3:f3:05:71:b8:6d:93:a4:b2:5b:9d:cc:
8a:5a:cc:8e:25:42:00:58:c2:f8:84:da:96:c0:94:be:a3:fb:
da:b8:ec:45:1f:33:1e:64:68:22:bf:08:5e:e4:a7:5d:e1:30:
dd:25:37:ab:4b:2f:4d:9d:08:01:f3:01:65:8b:0b:6d:b9:40:
1e:76:25:b8:82:9f:88:52:79:48:32:5c:0d:93:63:67:09:8e:
fe:30:c4:1b:9b:cc:6b:7b:3b:f0:66:16:fc:34:f8:73:de:83:
d8:41:c7:b6:fd:4d:f3:52:b0:b6:28:ab:d0:91:ba:37:d8:57:
c6:d4:60:4d:81:d3:54:37:70:3d:6b:48:36:03:e1:b5:39:28:
93:7a:9d:fd:1c:31:04:e4:aa:57:68:e3:f0:ab:b9:f5:a5:0e:
b9:dd:0c:c7:c7:11:06:4f:0e:b5:bd:e1:53:36:92:fd:38:0b:
f8:9d:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:39 2025 by rpki-client