Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/872efa43-3c96-3fdc-a969-eb7ac47edf99.roa
File: 872efa43-3c96-3fdc-a969-eb7ac47edf99.roa (raw, json)
Hash identifier: XCZUIeGy5tJlQWnRFj7lFnI91RvUGeSeuNqlA/zMosM=
Subject key identifier: 2D:D0:54:3C:71:3F:D0:7F:30:DD:16:B6:C8:C0:86:5F:0B:BA:C0:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F1BFC5283265DA2635C880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/872efa43-3c96-3fdc-a969-eb7ac47edf99.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.243.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f1:bf:c5:28:32:65:da:26:35:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5b46fa49-3860-4257-8571-89d68ee015f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:7f:be:35:10:18:28:17:6a:8b:7f:75:03:
ee:27:6a:4f:95:e5:6e:b2:15:9f:6e:92:cd:bf:8a:
ee:14:5b:d0:57:5e:97:d1:97:70:c3:c9:d4:a2:25:
d3:c4:3b:ed:6c:23:5d:27:68:7e:a6:65:aa:d0:a9:
ed:91:b6:f6:1e:19:9a:69:5a:3b:f7:61:8a:84:67:
d8:ec:07:f9:ea:13:b8:b5:26:f5:12:22:34:ec:fd:
ab:5a:3d:17:10:b9:93:1b:f0:08:9b:b6:89:18:7e:
0c:8f:3e:22:3b:cf:8f:e5:08:7d:69:a6:ea:40:23:
b8:14:73:19:08:25:e1:e1:87:8e:cf:02:47:d8:82:
51:ef:d2:06:23:0f:52:e3:2e:6e:6c:82:ac:d4:40:
b8:58:91:d9:25:2a:b7:4a:cf:08:73:d4:cb:4d:d7:
5b:7d:43:57:b3:1e:49:78:d5:89:12:3b:61:55:ad:
aa:6c:2a:d2:f2:dc:8c:5f:35:3c:c1:3f:2f:9d:63:
18:c1:6a:08:fa:94:4f:89:52:3a:01:ff:45:38:af:
af:9c:db:71:c7:4a:f0:ea:9b:1f:a7:28:03:2c:4d:
ca:98:05:af:68:dd:38:e7:d7:1b:85:8d:19:58:da:
0c:df:6b:ab:32:0b:3f:22:ab:28:c2:33:61:ea:70:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D0:54:3C:71:3F:D0:7F:30:DD:16:B6:C8:C0:86:5F:0B:BA:C0:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/872efa43-3c96-3fdc-a969-eb7ac47edf99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:aa:fb:d1:35:72:30:b9:57:89:5b:d4:d3:0c:ef:6d:84:7f:
1a:ca:54:d3:17:05:f9:1d:34:99:9c:98:e1:38:4f:7b:a6:5f:
b9:b6:13:47:f4:15:80:a0:72:f7:25:30:4f:17:d1:21:7c:0a:
21:c8:95:cb:99:4d:eb:1e:01:5b:95:95:3a:47:83:58:d0:e8:
c5:d6:05:ee:e6:4e:ef:ba:31:57:09:03:33:ea:a6:a0:86:d5:
33:66:7e:ca:72:5a:c3:33:b8:0b:92:b7:c0:a4:f2:35:eb:5a:
2d:f6:98:07:fa:d9:e7:16:c4:7a:97:e2:76:fc:06:54:ca:b0:
df:c0:c1:f8:2d:ad:35:60:68:1a:c6:e0:36:08:be:a7:3f:87:
5a:da:07:50:50:a3:c7:35:50:b4:af:99:5b:8a:f7:06:d1:ed:
d4:e0:a8:82:f1:af:d6:85:64:dc:c1:30:0e:ce:5d:48:3f:ac:
e0:b2:44:22:6f:9c:91:74:40:2d:d8:51:f1:3d:80:ca:32:1b:
0d:de:b2:b3:b1:b7:a2:d0:ab:ef:78:41:95:ec:16:d9:ca:90:
b5:c7:10:19:1d:67:c4:9e:67:0d:d8:f3:94:b7:c4:bd:63:95:
9b:24:71:fd:68:e1:f3:ba:40:fc:c7:fa:d0:b9:2d:08:ae:95:
52:7c:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:49 2025 by rpki-client