Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756025f0-2e07-3dd7-8596-6fdf81eff773.roa
File: 756025f0-2e07-3dd7-8596-6fdf81eff773.roa (raw, json)
Hash identifier: Bs1AFOqcDT/+JJIpIh7EhtM2v0e4A95L2FtUVLlN/oA=
Subject key identifier: C2:F1:99:00:90:DE:3D:52:E8:73:08:32:44:A8:FB:B1:9B:8E:9B:E3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A210B67316DA36421C4C000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756025f0-2e07-3dd7-8596-6fdf81eff773.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.185.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:21:0b:67:31:6d:a3:64:21:c4:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f4204d27-ab6d-416b-80f7-201c397933dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:c1:d2:f8:f7:ef:1c:92:e7:19:c5:b5:24:
24:51:8e:cf:ee:f9:82:cf:bb:f9:9a:f3:33:c1:b4:
6e:5d:1f:85:86:dd:0b:4a:2b:23:66:70:ac:3d:e5:
ae:12:b4:21:b0:b9:af:80:21:29:b5:fd:13:0d:73:
fc:c6:e2:b1:8c:46:79:61:55:40:f2:ac:f8:0d:c6:
fd:25:cb:ed:73:b7:74:72:8f:a2:66:d8:69:3b:45:
e8:d7:b1:e7:aa:73:ee:f2:e9:39:9c:83:80:93:6f:
4e:6a:8a:d6:1e:8f:6c:f8:17:64:30:e1:61:25:64:
81:cd:76:49:62:a6:00:11:51:a2:5c:77:e0:cc:37:
dd:16:b1:2f:6e:c3:cb:31:0b:c9:c3:89:e5:08:48:
76:02:6c:1a:5d:33:70:9e:55:59:f7:87:20:15:94:
1e:48:03:8b:2c:73:b8:18:7b:cc:48:67:ed:2b:37:
b7:b1:cd:a2:e3:59:3c:4c:45:fa:01:b7:6d:d1:fd:
fe:a5:86:61:99:51:aa:c7:e2:d3:ec:56:fb:b3:c8:
9c:9b:1f:03:48:fb:10:ca:07:ea:dc:61:57:16:d6:
9e:50:4f:fc:5f:ca:83:c0:cd:4a:35:f6:c6:18:98:
d6:a5:96:05:b3:92:31:f9:67:ad:72:bc:00:03:0a:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F1:99:00:90:DE:3D:52:E8:73:08:32:44:A8:FB:B1:9B:8E:9B:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756025f0-2e07-3dd7-8596-6fdf81eff773.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.185.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:99:2f:85:b0:4a:36:ed:d5:ea:cd:87:75:95:8c:32:54:3d:
48:25:75:4e:1d:f1:cf:dc:1b:c1:e0:51:16:71:5b:94:98:92:
f2:38:2e:f9:b0:75:43:7a:6e:f3:46:eb:aa:f1:e4:b1:52:14:
9a:76:61:30:0f:49:a9:eb:3d:b2:5f:c8:ba:9e:5b:3f:23:b8:
e4:06:6f:9d:4d:f9:51:d5:f5:ec:af:4a:3d:c9:76:ae:d5:f8:
a2:ad:85:b9:4c:a9:0a:55:b3:e8:16:8c:22:00:81:94:a8:42:
86:ab:ab:3f:58:2c:53:0a:ea:6e:06:94:c3:f7:44:15:91:a6:
d7:46:d2:42:8a:d1:dc:f5:a8:79:46:bf:0f:3d:8f:a2:85:4a:
97:eb:a1:24:b2:06:ed:dc:18:a7:8a:fc:3f:49:0a:4d:b7:0e:
e0:20:f8:7b:90:ab:b7:cb:be:2b:96:d1:f4:4c:40:d4:4c:c0:
3e:16:ac:53:d0:13:25:26:90:ca:29:54:01:4b:bc:33:e3:85:
35:f9:6b:a8:b5:7d:82:96:9d:13:36:99:ad:77:76:af:46:f4:
f0:0e:6e:fa:ea:96:99:de:0d:4a:77:ef:dc:13:d8:cb:b6:b5:
56:c4:ef:74:8f:03:f8:46:97:5e:93:2d:b7:34:af:ef:b4:bd:
51:d6:1d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:05:10 2025 by rpki-client