Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6f0909c6-f7d9-34c8-af58-bb53897e12ce.roa
File: 6f0909c6-f7d9-34c8-af58-bb53897e12ce.roa (raw, json)
Hash identifier: Ncpq9AKnCE83YXlLqL3mw4RWWSiwpmjirz964Pqbe+U=
Subject key identifier: F4:75:73:C0:18:57:93:47:B7:31:7F:55:E0:F6:D2:4A:7D:5B:DA:20
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B0645EA2ACB678CA8D315F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6f0909c6-f7d9-34c8-af58-bb53897e12ce.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.202.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:64:5e:a2:ac:b6:78:ca:8d:31:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=fb5c161e-492f-4646-8b10-b3a4198244ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:2e:72:75:0d:0e:d2:fb:38:65:c0:c0:17:
c8:06:a4:5f:21:d4:d1:03:3a:87:b6:a8:29:91:8e:
88:82:12:82:c2:6f:b4:09:55:b5:44:bf:9f:16:42:
2d:c2:df:68:d4:e5:af:18:5a:57:de:7c:2a:66:eb:
e3:88:92:8c:88:b5:29:c7:4f:e4:18:5e:b1:b3:b2:
94:cc:ad:c9:2b:4a:cc:ee:8a:58:da:49:e0:b4:71:
5c:af:1e:4a:4c:9b:7b:9a:d9:05:d2:e4:65:63:13:
12:a9:8c:0c:e8:ac:01:84:c6:0c:30:f8:b7:99:04:
3c:5a:61:d5:b2:3d:de:41:89:90:ea:84:15:b0:99:
7c:6b:60:05:bb:e6:88:38:56:61:fc:9b:93:ef:e2:
f2:c0:10:1e:f5:48:37:ff:84:95:83:a9:aa:03:58:
99:b2:c1:c2:78:20:0c:92:8f:55:24:62:53:e6:90:
75:e9:a4:f5:f9:8a:a4:b6:ab:65:ff:8b:ae:8f:07:
e5:fa:86:48:71:71:90:41:0a:58:f2:15:8c:64:cc:
17:8e:ca:3a:1b:da:8a:c5:f8:77:82:d6:d4:5d:1f:
56:8d:c5:6e:77:21:e7:6c:3d:88:fd:7a:16:59:08:
63:9b:4c:b0:aa:66:e7:c3:a1:7b:43:32:1d:e4:0a:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:73:C0:18:57:93:47:B7:31:7F:55:E0:F6:D2:4A:7D:5B:DA:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6f0909c6-f7d9-34c8-af58-bb53897e12ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.202.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:6b:2c:46:c8:4a:b5:0e:a6:11:8c:ca:82:48:be:b7:c2:c0:
fb:25:f2:50:b4:99:ff:82:dd:44:d3:3b:2f:ab:ae:ac:6b:63:
aa:14:90:ce:45:40:b2:41:3d:08:ec:23:ec:91:22:90:72:29:
24:12:d4:ee:c4:86:e1:69:09:10:09:4f:07:cd:62:8a:a4:54:
50:3a:b5:10:b9:b5:30:5c:21:6e:2e:20:b3:7f:9a:bb:99:51:
83:c8:01:fd:4c:f4:3b:36:68:88:8e:3c:fc:52:8a:9e:2a:46:
7f:c0:20:f3:0d:1d:8e:32:0b:60:c2:b2:9f:ed:fa:38:76:de:
dc:57:b1:f2:f8:03:5f:16:b1:5d:0a:34:ea:2a:2f:4c:8d:0c:
b7:f3:d6:1a:01:a7:ef:b8:f0:c2:43:94:51:ac:47:65:73:97:
0e:20:d7:34:ed:1e:5e:46:c7:47:73:a9:fc:b6:cc:f6:92:d3:
a3:da:59:5c:e2:6e:f9:c3:db:1f:c7:4d:8a:f5:8e:51:d4:fd:
2f:35:b3:4a:b6:c0:64:52:3a:96:84:61:c0:ec:46:f3:8c:5f:
14:e1:e0:7e:c0:fa:4b:40:4e:70:fb:af:b0:9c:0d:8c:af:fc:
d4:5b:fb:b2:fb:d5:3b:2a:32:29:04:81:44:61:07:4a:bc:ea:
4a:12:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:40:40 2025 by rpki-client