Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b1da6b9-4e3c-35a8-bcfd-d1f4b0da3da6.roa
File: 8b1da6b9-4e3c-35a8-bcfd-d1f4b0da3da6.roa (raw, json)
Hash identifier: 6S+5LOfoh1+4FX8ekW49MyaKkddFK3Z30hlgHB6xCvw=
Subject key identifier: 7D:2F:56:10:74:0A:19:6F:96:31:4B:32:4E:36:AE:FD:97:0B:58:FB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F563915A7D18B1EEAF2D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b1da6b9-4e3c-35a8-bcfd-d1f4b0da3da6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.187.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f5:63:91:5a:7d:18:b1:ee:af:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fe88fa5e-c7c0-4de1-bc3b-f61120ded36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:75:a5:37:e2:b1:3e:43:12:18:72:a6:0c:
0a:b0:d5:cf:85:e6:91:04:d6:ea:70:08:93:87:98:
f2:69:c6:6d:c4:e6:dc:1e:7a:c9:b3:f7:60:2d:64:
d9:2b:b4:e1:5b:72:74:f1:7b:12:3f:e9:83:68:62:
8b:b6:03:d8:4f:5f:e2:e0:cf:cd:c5:44:5c:c1:9b:
c8:86:2c:11:19:e7:77:14:2f:8b:88:d5:90:51:a4:
15:c6:89:34:82:46:33:61:7f:3c:6e:a0:bc:a9:fd:
4e:e0:54:17:c3:09:e5:1d:80:56:2c:0c:76:36:88:
23:4c:9b:59:18:24:39:93:46:48:5a:e5:43:a4:33:
9c:da:d2:92:e8:a4:3c:9e:44:54:cc:43:75:2d:84:
f0:68:23:8b:58:3e:04:3f:60:f8:22:15:39:58:e7:
8a:ad:aa:8c:5d:40:f1:e2:39:9e:ea:4f:cd:1d:7d:
fe:8c:a5:f3:d9:bb:eb:1e:13:da:49:01:43:46:0e:
56:ed:c9:00:03:f1:00:3a:2e:0e:d4:af:f7:b2:da:
20:18:d3:e4:c3:f8:ee:2a:55:8c:66:27:cf:9c:34:
67:73:d4:72:17:69:a6:5e:5b:84:fc:ac:05:e0:d0:
25:19:25:68:da:6d:df:b5:74:07:b8:7b:2f:aa:1b:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2F:56:10:74:0A:19:6F:96:31:4B:32:4E:36:AE:FD:97:0B:58:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b1da6b9-4e3c-35a8-bcfd-d1f4b0da3da6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.187.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:18:65:bc:de:1d:65:d4:cc:d8:fb:41:21:d7:49:a7:ad:89:
81:7b:34:d5:77:1e:dc:b7:c3:a5:3f:0d:46:c0:b2:c1:3f:10:
bb:06:55:3c:a2:b6:2c:0c:87:89:89:95:e0:c0:8b:7d:89:6d:
87:43:87:5c:2b:66:0a:1e:e0:d5:d9:13:09:38:ab:16:e8:73:
58:f7:97:34:aa:36:67:40:33:8f:f6:d8:d6:63:57:6f:5e:8b:
ae:64:4b:4b:62:d2:3b:f5:b6:ad:fb:b7:28:40:a0:7e:0d:f1:
0c:99:53:62:f7:e6:58:a9:a4:8c:fb:fe:81:51:57:e3:dc:b4:
d9:6d:9a:6a:a2:01:6d:48:65:e1:15:d7:a6:ec:42:70:f3:f5:
33:11:cc:ea:69:6c:d1:1d:d0:5a:b7:82:89:99:1d:e9:d9:18:
79:5b:2c:bc:45:a8:e3:9d:be:59:3c:c3:06:0b:0b:b5:4e:7c:
62:db:15:f3:03:b1:13:50:63:7d:b5:e2:98:ce:a3:6a:09:c7:
22:3a:b2:07:1b:84:50:b2:e8:de:9f:31:e8:bd:04:3a:a8:40:
8c:04:54:0e:60:dd:66:32:ae:a6:51:50:7f:64:1b:e3:1e:1d:
75:70:2a:62:9b:aa:bf:36:bd:65:2e:5b:09:e7:3b:c9:58:b3:
ec:d3:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:26:32 2025 by rpki-client