Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/785a0e21-6d54-3125-ab8d-3414581857f7.roa
File: 785a0e21-6d54-3125-ab8d-3414581857f7.roa (raw, json)
Hash identifier: egfLHROhFyLtEPFG9/M+p/1UoQQE8SnutoRxJYX8Z1Y=
Subject key identifier: 32:25:68:C4:63:34:C4:FF:BA:EB:59:9C:DB:EE:7C:9B:D9:B6:C8:1E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A146B63D09F66996731AFA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/785a0e21-6d54-3125-ab8d-3414581857f7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.185.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:6b:63:d0:9f:66:99:67:31:af:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d5f1e63b-2519-4ef7-904f-45a0fa784571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:56:b2:42:b1:b8:52:d4:58:8c:c3:c4:c4:
98:5b:f2:2d:f6:5a:51:ab:dc:44:8a:7f:ac:ab:89:
54:43:5c:05:a7:12:9f:81:20:b9:2b:44:74:b8:aa:
14:30:b1:88:29:b3:af:89:5e:8b:29:b8:25:35:f3:
78:b4:c1:31:e6:55:e3:c5:a5:1d:0f:14:e6:cd:6d:
1c:d5:eb:d2:d3:e7:47:ad:07:77:11:a4:2d:a1:22:
14:a6:6e:99:1b:c6:78:ec:39:ab:4b:e4:8c:83:26:
ec:b7:5c:b8:87:70:24:80:d6:30:16:52:77:02:d5:
68:00:84:8d:6d:27:d0:34:df:1d:c8:fe:b0:26:21:
0f:a0:48:82:97:4b:8b:74:a2:f4:7d:24:79:4a:e6:
db:05:3a:24:01:6c:2d:0b:4b:dd:19:28:d8:c3:a8:
4d:cd:c4:25:8a:64:45:72:89:5a:20:b1:d8:29:b9:
59:38:e6:ae:40:e6:57:0a:84:08:be:d3:4a:1e:96:
05:44:78:f7:38:92:5f:8b:4e:ea:1d:ee:da:b9:58:
6d:c5:80:da:eb:c0:24:9b:52:05:4c:cc:bf:f2:b4:
ce:0c:88:69:e3:21:ff:75:ba:73:89:2e:ed:da:39:
0a:d2:a2:44:66:e0:c6:ef:29:0e:7c:99:17:6a:32:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:68:C4:63:34:C4:FF:BA:EB:59:9C:DB:EE:7C:9B:D9:B6:C8:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/785a0e21-6d54-3125-ab8d-3414581857f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.185.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c9:06:9f:6b:a4:59:6c:5f:7f:20:5b:c5:1e:23:d9:15:5f:
ef:f9:16:c3:cc:f2:a8:3b:d5:8a:c7:e2:29:d5:85:ba:42:6c:
79:35:f9:d9:c3:10:d3:c1:76:bd:5e:7a:0e:84:dd:73:a7:41:
e4:65:5a:3a:fd:ef:ea:55:3a:bb:91:fa:68:08:64:5e:4c:1c:
da:1d:6b:22:75:85:50:91:05:6f:d3:42:f6:f8:78:44:6d:67:
a7:24:51:a7:15:98:76:f4:ed:f1:17:5d:2e:41:07:71:01:d7:
77:da:b6:ab:04:a7:e8:da:d7:bc:92:aa:73:b4:5b:a7:d5:89:
5e:4d:bc:73:c9:25:66:04:e2:82:42:53:d3:ab:06:39:4d:2e:
20:14:38:23:c1:62:36:c8:91:3e:7d:1d:7e:23:4d:90:8f:24:
21:78:a2:d5:11:6b:dc:34:bb:ac:2a:fe:b1:a0:b8:54:81:67:
c8:8c:e1:44:c2:f1:b4:57:ef:21:00:a8:f8:75:f0:3a:c1:c0:
80:a9:cf:55:c9:3c:a4:41:a1:d6:9d:ab:a6:29:bd:16:66:be:
26:e2:4c:68:86:27:4e:a5:61:25:20:ec:ba:30:47:c4:c8:36:
c9:9e:05:d2:6d:be:70:51:3a:24:e4:8c:de:8a:bf:80:f8:f6:
67:b6:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:27:01 2025 by rpki-client