Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ecb4dfd-7a9e-3fdc-9cd0-3ddb2bc3ef87.roa
File: 9ecb4dfd-7a9e-3fdc-9cd0-3ddb2bc3ef87.roa (raw, json)
Hash identifier: L+8JFLwcbvoho0nCxR9pJfn47wq7qiDw5gi6fiS49Cg=
Subject key identifier: 58:38:6F:7E:0D:57:88:9E:D5:32:9C:CD:65:73:A1:C2:4E:92:38:03
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FD479261480056084521E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ecb4dfd-7a9e-3fdc-9cd0-3ddb2bc3ef87.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.202.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fd:47:92:61:48:00:56:08:45:21:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9f0a2878-8448-483c-9a50-206133094b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9c:56:9b:2e:45:f2:8f:46:06:d0:b6:f9:0c:
1c:12:78:99:96:97:f1:fb:db:c9:b6:b7:c2:a6:ba:
a9:51:d4:1f:09:90:54:47:10:01:2c:02:f4:1d:86:
8b:ff:d9:c1:7a:71:36:70:83:ed:08:86:17:20:62:
5f:42:aa:4c:fd:ee:9b:0e:28:45:e0:cc:64:9f:36:
1e:de:7c:2f:51:68:92:f7:3a:e9:fd:99:dc:0c:6c:
99:ed:1c:63:26:18:ea:0d:29:1a:09:41:8c:80:25:
e0:11:45:16:f2:bc:46:6c:af:4d:34:e8:70:f7:31:
3c:b5:2d:18:4b:cb:19:d0:36:3f:18:c5:e1:d6:47:
dd:2b:0f:a9:ed:1d:e5:e1:29:af:3a:cf:f5:13:a4:
ef:10:16:fd:0c:1f:33:72:b5:8f:99:1f:c6:10:0f:
c5:33:fa:cc:ca:0f:de:8e:83:4e:80:d6:c9:22:20:
60:2b:0a:05:04:1c:b1:2c:77:33:99:d6:d9:b5:14:
78:4d:b4:88:e3:7a:c5:e5:e8:6e:d6:2f:f5:38:53:
3e:4c:83:85:48:15:c4:c3:2d:ab:77:3a:5c:ec:f2:
d8:ef:ff:61:21:fc:52:23:08:ee:53:2c:48:db:92:
04:d9:83:38:01:d3:02:c7:4f:48:a5:a6:60:c5:c8:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:38:6F:7E:0D:57:88:9E:D5:32:9C:CD:65:73:A1:C2:4E:92:38:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ecb4dfd-7a9e-3fdc-9cd0-3ddb2bc3ef87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.202.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:8b:fa:35:97:3e:86:94:89:d9:84:3c:bf:3f:58:f4:f1:a1:
e7:84:d1:2c:69:d9:2f:4f:1f:fb:5e:4b:68:02:33:94:fe:6c:
ee:6c:70:85:b5:07:8e:43:49:1f:b3:22:04:58:e4:66:aa:be:
aa:89:62:ee:fb:49:b8:63:0e:b8:7b:02:eb:6c:39:02:a1:c4:
45:79:eb:47:82:42:1a:d5:44:63:05:51:e7:fd:1d:21:81:f5:
d1:a4:3f:7a:29:c2:36:41:65:c6:97:1d:c8:ad:fd:61:fd:91:
4d:a3:9a:c8:33:0f:9a:04:e8:9f:c9:e0:10:33:9b:15:c6:13:
ef:8d:86:79:da:8c:53:af:02:a7:e8:1f:a8:b9:2a:86:ff:18:
28:93:eb:9b:a8:63:6c:96:63:aa:c9:56:06:39:e3:ea:cd:33:
21:db:d9:df:7e:05:cc:1e:94:6e:94:94:41:bb:cb:4d:11:e9:
b7:86:af:27:12:1e:f9:fe:0c:35:b2:13:05:6d:d2:81:d7:77:
36:18:65:03:57:5a:65:6c:25:90:bc:07:da:a6:ba:52:70:ab:
a0:a4:c6:60:f5:59:95:49:2d:ec:db:b1:dc:8f:61:5c:ed:e9:
14:3f:ed:0a:47:15:c9:b9:b6:04:27:89:41:fc:92:9d:36:87:
88:9b:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:17:35 2025 by rpki-client