Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2d6353-65d3-39ee-8bb1-dde0617226a0.roa
File: 9e2d6353-65d3-39ee-8bb1-dde0617226a0.roa (raw, json)
Hash identifier: UXVRp15OaMpiE1emC1A8x94fkKNm09iD3YBep/1SKaw=
Subject key identifier: 80:7F:8B:B3:95:7F:CA:6E:12:FD:23:DE:4B:7F:2E:05:81:F6:F4:96
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1809DE45C890977C4EFC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2d6353-65d3-39ee-8bb1-dde0617226a0.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:09:de:45:c8:90:97:7c:4e:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4fab6b5c-d62c-4d42-b10b-fa02278f4edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:54:a4:a9:61:f5:d2:0e:84:79:9e:9b:49:
c7:b7:61:74:99:55:46:55:13:03:74:fd:16:94:68:
5d:21:a7:f1:2d:26:b7:62:d4:19:93:33:7e:27:a9:
22:2a:3c:93:50:b5:ec:30:4e:6d:1c:e1:a9:4d:70:
ed:81:4e:02:9a:1f:93:69:c9:40:81:a3:b1:ed:42:
12:fd:0d:be:ad:c4:21:01:fe:25:bd:dc:2c:cb:fe:
e4:0d:79:fe:00:df:37:61:cc:8e:22:ff:a7:3a:00:
16:03:43:cd:d1:0b:18:35:b4:4c:d7:16:9f:12:d5:
b8:dd:35:bd:c9:7f:78:49:03:18:14:f8:01:83:a8:
2c:47:82:30:d0:56:8f:9a:fb:e1:38:89:c4:e1:cf:
ec:ba:d8:34:ef:6b:35:38:8e:04:b4:ff:40:7c:3a:
f8:d2:24:4f:29:fc:38:f2:b7:f8:62:a7:ef:52:4e:
18:a3:69:f2:67:b3:b0:c2:12:3b:fd:ec:14:40:64:
a2:ba:34:cc:98:9d:83:fc:b9:33:87:81:0f:40:a7:
35:1e:f8:97:30:42:8a:ee:83:fe:6f:63:75:ad:91:
3c:9c:5f:e7:38:3d:9b:4b:e8:81:05:09:79:da:3c:
61:45:18:85:3a:18:dc:b2:31:79:62:46:af:9a:a6:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:8B:B3:95:7F:CA:6E:12:FD:23:DE:4B:7F:2E:05:81:F6:F4:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2d6353-65d3-39ee-8bb1-dde0617226a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:a3:0e:61:90:8d:fb:f5:f3:75:5b:3a:3d:d4:19:f7:aa:1e:
e3:b3:9f:0a:8e:ae:47:25:03:47:a7:c0:3d:d7:3e:7c:ef:b8:
86:2d:96:24:c4:5b:e9:55:1b:48:ba:14:cb:16:d6:4b:8a:76:
10:46:cd:9b:e9:bd:61:55:76:25:c5:07:aa:62:34:34:68:3c:
de:26:36:03:86:ff:2d:c4:0a:0b:bb:f3:ca:33:cb:a5:02:c3:
26:97:27:f8:4e:d7:ed:b3:f3:2c:42:dc:36:2f:95:2b:e0:39:
42:97:dc:b2:9e:e2:2e:19:98:18:dd:40:19:4b:ed:27:9f:f0:
1c:51:77:12:49:ee:6d:3f:ee:ff:f5:b0:c5:fd:a3:65:ca:aa:
e3:94:65:9e:46:a9:68:c7:1a:05:ae:cc:be:70:a0:b1:f0:50:
99:76:3d:50:17:ca:83:29:59:b9:10:2b:96:48:7a:0a:b0:7c:
3e:16:dc:ed:ce:f2:3d:95:35:b6:d5:5d:32:cd:33:1e:f6:cb:
43:c8:09:89:a6:4e:61:ca:4a:1e:26:87:ae:e7:05:44:f2:2f:
ce:4f:fd:14:b2:fd:ba:0b:e6:91:92:7e:b4:35:78:6d:6a:0e:
3b:86:3d:0c:2c:b0:6a:0b:5f:85:f3:3c:3a:98:42:3a:6f:87:
84:50:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:08:24 2025 by rpki-client