Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70e471d0-bcf5-32f9-b4b7-817e2f011793.roa
File: 70e471d0-bcf5-32f9-b4b7-817e2f011793.roa (raw, json)
Hash identifier: PCro98iaZg563ILPvKWhSjFJFdaemGLecxnQqpfs7ks=
Subject key identifier: 9C:FF:0B:CE:14:14:0A:99:BC:6B:13:51:5B:A8:25:11:44:8F:65:E9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A035A2114D98102A5B0F0F6
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70e471d0-bcf5-32f9-b4b7-817e2f011793.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.187.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:5a:21:14:d9:81:02:a5:b0:f0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4e7a3f45-e6cf-4ab8-945b-8ac7c49a1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:68:8e:24:e9:70:75:5e:21:2e:8d:1c:c0:
d9:5a:38:e8:5e:40:f4:72:1d:8e:7f:b4:40:44:c6:
f9:88:9f:c7:1b:86:96:87:ac:39:c4:dc:44:56:0a:
d9:c1:f5:16:fe:81:d1:a1:13:56:15:d9:59:d6:5a:
2a:d3:f7:bd:0c:26:a4:2a:66:e7:55:c0:ab:2b:2e:
00:c0:8b:fc:29:b3:ed:f4:be:6b:3c:47:d7:b7:cf:
6d:aa:cf:f3:ff:e5:09:e1:86:30:72:8d:a3:24:e8:
cb:00:a5:ce:17:9a:69:ec:a2:08:55:fd:8e:88:c3:
93:55:65:98:c4:77:58:b6:41:ea:da:01:07:57:ea:
e1:ad:fe:72:3e:ff:76:ac:e7:b3:a1:a0:9f:4d:b7:
f9:f2:12:f8:26:1d:ef:ec:7e:d4:f3:fa:a6:9a:40:
4d:17:b5:6b:c2:9b:91:ac:7b:7b:8a:f9:57:c7:7b:
02:0d:b8:54:3f:f0:fd:d6:7b:b9:3a:3a:5b:90:f8:
c5:8c:14:d3:20:2e:ad:cb:f9:07:1b:be:26:8c:63:
aa:18:20:8d:85:77:77:c5:4e:a4:56:19:3b:07:42:
db:5e:c2:5b:6e:40:58:f8:d0:4f:d2:45:b0:8b:6f:
b0:4d:db:01:73:25:f9:42:7c:47:29:df:30:b9:86:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:0B:CE:14:14:0A:99:BC:6B:13:51:5B:A8:25:11:44:8F:65:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70e471d0-bcf5-32f9-b4b7-817e2f011793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.187.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:0a:31:db:63:6f:da:74:8c:73:c7:8d:4e:ea:a9:91:7a:b1:
4f:03:db:51:78:0a:ca:1a:7a:a1:2e:a7:2e:f8:53:94:1a:59:
a1:db:e5:ba:df:c0:26:f8:48:9e:04:0d:8d:50:86:3d:dc:dc:
96:71:f4:39:89:40:35:d4:15:32:f3:5c:b1:6c:b5:3a:04:f6:
82:23:d5:07:3a:13:2d:fa:b2:87:87:14:42:f2:45:6e:52:b6:
7f:7a:48:7c:8b:30:e4:15:3d:90:cc:a2:4a:fb:a5:4e:26:99:
d4:07:ab:2a:f2:4f:7a:26:58:fa:3c:d0:16:e8:c2:6c:e0:f3:
ba:53:da:c9:4d:00:7e:02:c0:b7:a3:b8:d7:86:ab:94:11:53:
cc:bb:6b:39:8f:91:32:69:25:d4:7e:b4:35:82:0c:e1:ef:be:
fd:a7:52:3e:53:08:46:4a:11:0e:c5:f3:e0:7c:9c:04:f5:0b:
34:13:2d:6e:b2:79:91:04:b4:cf:7f:8c:09:39:c4:3a:bc:31:
92:38:b1:d2:9e:c5:d2:9d:36:95:85:9a:38:95:29:f8:b3:72:
53:84:28:59:65:ea:64:8c:03:90:7c:09:42:d4:a9:aa:00:6e:
c1:f6:c7:55:85:00:08:34:ad:a2:62:ab:6c:cc:2f:0f:b1:16:
6d:e7:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:28:21 2025 by rpki-client