Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90e8f753-aa78-3df4-b473-5d0fc5b006ef.roa
File: 90e8f753-aa78-3df4-b473-5d0fc5b006ef.roa (raw, json)
Hash identifier: jdVPLCDvOSZsod8cPxziFn5CydDk46YyIY0OnbiNU+s=
Subject key identifier: DE:CA:10:75:98:9C:D1:A8:42:C1:B8:88:B8:32:84:84:D2:A3:5D:19
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F6353E900AD905573FFC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90e8f753-aa78-3df4-b473-5d0fc5b006ef.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.241.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:35:3e:90:0a:d9:05:57:3f:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=87d7d6da-6142-447e-ae53-f5764aee14a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:b0:5b:39:c7:9b:28:b6:83:72:02:88:a8:
2b:af:38:af:4b:7b:e7:6b:d7:02:1d:a1:00:0c:01:
79:52:ad:13:e9:b9:dd:d2:84:b0:49:3c:54:69:3a:
66:d7:d4:56:09:21:2f:2f:2c:14:18:00:41:ad:95:
e7:04:1c:c6:b7:1e:2c:b5:0b:41:8b:80:4e:41:71:
fc:3d:8a:65:63:60:f6:da:e0:0d:c2:23:95:b9:59:
0f:ef:d8:b9:a5:65:00:1b:d5:ae:fb:37:39:36:19:
23:df:f6:b2:8d:e6:ec:f2:7c:99:28:23:d8:74:3d:
e7:a0:35:94:b7:94:51:97:c4:b5:b9:11:2b:db:d5:
24:cf:99:66:26:8c:75:39:76:5f:ba:8c:eb:c2:01:
81:70:1e:7d:93:d0:c2:0c:4e:aa:e7:63:87:d7:ed:
3f:2e:8e:58:bc:7c:99:90:4a:3b:f5:e7:cf:a7:2d:
41:21:6a:39:6a:47:68:44:e7:48:8a:5b:ca:a7:7e:
a6:ba:4e:6a:e1:c4:33:e5:a7:db:3e:04:86:f5:52:
35:e8:b1:95:4a:90:20:6d:b0:7e:53:77:93:62:be:
68:fd:fa:98:ad:34:fa:d3:b4:31:71:43:43:02:f4:
42:8a:b3:8a:54:f1:87:49:c7:bb:71:2b:77:eb:01:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:10:75:98:9C:D1:A8:42:C1:B8:88:B8:32:84:84:D2:A3:5D:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90e8f753-aa78-3df4-b473-5d0fc5b006ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.241.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:0d:95:17:55:68:ea:e1:2a:88:32:3f:99:36:41:74:6d:47:
ef:cc:e2:96:8f:10:8e:4d:8b:32:c5:3d:b5:b9:92:e8:52:2a:
e5:10:99:a9:df:74:22:14:a5:55:13:2a:83:b3:dd:72:26:7d:
4d:0b:13:e3:60:09:3d:2b:81:90:54:d9:7e:56:42:d2:4f:93:
85:d6:f0:d8:9b:ba:b7:c0:30:9c:76:ab:bb:e3:12:b9:ac:c7:
e2:7b:27:fa:94:d1:63:39:7a:32:19:91:a6:43:fa:dc:f4:62:
5f:0c:62:f8:ae:cf:aa:d4:85:30:ae:58:aa:79:e6:3c:d0:3e:
fd:02:12:ae:aa:e6:89:e3:5e:26:a3:7b:3a:14:80:64:9e:cf:
62:ba:45:fd:4b:ad:fc:b9:2e:d9:2d:87:12:2f:30:f4:17:94:
80:b1:ff:e1:55:d8:9f:7d:22:d4:39:96:bb:12:f2:d7:4e:5d:
65:5f:bf:c6:02:c8:d9:1e:ad:0f:3b:20:a4:61:76:16:04:9e:
b5:24:28:01:6e:5c:3f:ac:3e:a1:b5:ea:8d:ce:17:5a:92:95:
7a:d3:6e:1e:bd:7e:70:50:8a:ca:ae:5f:b0:19:23:2c:dc:c4:
e2:c3:97:c4:c1:2d:c1:af:5c:d2:dd:e3:de:e1:14:90:14:ba:
35:9e:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:26:47 2025 by rpki-client