Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60a0aad9-2694-3f45-807e-667c786bf3b1.roa
File: 60a0aad9-2694-3f45-807e-667c786bf3b1.roa (raw, json)
Hash identifier: r7ZJcGV9CQIMlyHvdc3uSHOx0w9gP3GaTNYLzXIaVK0=
Subject key identifier: B5:4F:70:09:42:BF:0A:7B:61:73:A7:E0:8A:94:62:9D:89:E6:A4:8B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6B273D4D4330DEAD0E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60a0aad9-2694-3f45-807e-667c786bf3b1.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.186.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6b:27:3d:4d:43:30:de:ad:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=a08c6acf-b62d-4ea5-970d-1fe9ea21f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:82:71:fe:c1:9f:82:28:1a:ef:ec:25:6d:
67:0c:3d:5c:03:39:df:9b:14:38:68:9f:46:19:e6:
58:82:94:5c:73:ed:33:46:19:02:4d:0c:cd:7b:58:
21:2d:04:df:8f:53:ff:b9:dd:ce:e7:18:1a:4f:b1:
3d:85:81:3e:42:1b:b0:0b:bd:39:8d:74:b2:f0:39:
e6:04:12:40:60:ff:e5:5e:f2:98:03:46:7d:29:34:
fa:fd:10:74:d5:19:06:2a:a5:06:81:2d:0e:a5:60:
cf:4c:2b:2b:dd:d3:64:b9:cc:66:51:14:2e:0d:19:
cc:6e:ea:86:bb:5c:24:c3:c0:82:1d:73:15:18:82:
cc:c4:d5:73:a9:f8:39:25:10:73:3e:16:a3:2d:1b:
02:9a:96:6d:49:08:61:7d:98:ef:3f:99:23:7a:1f:
3d:6f:a9:d4:ca:5a:39:3b:ce:be:d3:2f:79:6f:e4:
19:57:ab:dd:31:4f:14:63:8f:6c:4d:8e:0d:5e:a7:
4e:22:a7:cc:1d:d8:54:36:42:52:41:6d:ef:3b:23:
03:e5:54:a7:63:ae:f4:dd:f9:5e:1b:4e:f1:c7:e7:
28:c3:b8:a8:b0:80:28:8e:f4:c2:20:3b:ac:53:61:
e0:85:2f:b0:2b:8e:5c:0e:77:a3:8c:b4:7b:8f:f6:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4F:70:09:42:BF:0A:7B:61:73:A7:E0:8A:94:62:9D:89:E6:A4:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60a0aad9-2694-3f45-807e-667c786bf3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.186.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:6e:87:8f:c0:0b:6b:d9:1b:3f:3b:f5:24:21:d1:aa:db:28:
ec:1b:c7:bf:ab:18:f2:92:5f:4d:ab:1e:fe:af:9b:68:fd:c3:
fa:2c:69:91:22:33:0d:91:3f:64:e5:ac:3c:c4:c8:38:47:38:
30:12:db:47:42:bb:ae:d9:26:12:db:2b:ec:70:28:1b:d1:98:
37:5f:45:6e:72:13:45:fa:c3:02:21:39:c9:8f:d8:90:24:f1:
52:1a:2e:11:c8:11:5b:6a:90:4f:64:88:1a:e2:b6:82:f1:d8:
8e:1d:cb:eb:00:3b:27:c7:e4:74:14:ae:9d:1d:42:82:a6:18:
2e:8a:7f:ac:69:c6:a7:53:87:6e:5c:26:57:ee:17:eb:dc:41:
87:22:92:e9:a0:d0:ef:db:ea:c7:a2:39:29:a6:3b:de:7e:1c:
d2:43:90:9c:fc:48:28:f6:4f:78:f4:89:2f:c7:cc:29:b4:55:
63:ea:9d:cc:3c:b1:67:c8:60:bb:35:ca:a3:50:36:e9:ee:f2:
d7:67:97:5f:2e:e0:61:79:de:0a:71:0b:c0:a8:be:1d:43:90:
d5:25:04:48:5b:30:03:51:78:44:7e:92:74:87:01:91:ce:4c:
83:82:b2:d5:72:e5:0b:e9:63:7b:2d:ba:39:b2:24:68:9b:aa:
42:97:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:58:17 2025 by rpki-client