Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a843ba6f-f023-36a2-839b-80f64a79fd05.roa
File: a843ba6f-f023-36a2-839b-80f64a79fd05.roa (raw, json)
Hash identifier: l3SjHvDLfNRwBaxTNmrG4dVhJIjmUUjEcidRTlXb8Zo=
Subject key identifier: 83:1A:22:28:E1:0E:C6:8F:7D:EF:FD:78:DA:CA:32:BD:52:F2:4C:9A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A031217F03EA14EE14B6300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a843ba6f-f023-36a2-839b-80f64a79fd05.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.236.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:12:17:f0:3e:a1:4e:e1:4b:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7db0f988-5db6-4e71-99c7-361b910c4662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:d0:51:ae:65:cf:15:31:0b:21:ed:be:46:
ef:67:16:01:fd:ac:69:ed:cc:53:b3:33:28:13:71:
74:50:e6:c9:93:e8:04:ff:e3:a1:99:ec:a2:e2:46:
c9:46:fa:17:f5:95:3e:dc:21:41:30:12:4e:00:fe:
07:3a:90:df:9b:ba:75:78:02:b9:8d:fc:e5:be:c6:
30:56:6f:25:d9:7b:ed:dd:9b:b2:37:09:d8:a5:e7:
48:0e:0a:16:6e:3f:f9:59:c6:40:5d:13:1e:a5:8a:
78:65:77:14:b9:0b:48:32:51:ab:d9:c4:61:de:48:
5e:16:18:95:52:f7:80:e3:7e:95:02:d5:46:e0:d4:
0c:c4:ce:0a:f4:d3:66:af:42:a8:a9:ec:78:01:f4:
10:4a:3f:75:6f:ef:eb:a8:59:a4:df:2e:45:95:0f:
87:67:ed:8b:22:e9:38:27:f2:fa:88:ac:6a:c5:bb:
a3:1b:c9:84:cc:8a:2a:8b:83:03:5c:20:ad:d0:17:
b8:1e:15:7a:72:56:1c:62:10:38:25:0d:80:67:f9:
ad:5b:29:ba:1e:67:d2:08:16:fe:e4:41:69:6d:44:
ba:8d:55:c8:94:70:c9:73:c9:50:48:02:18:2b:c7:
80:66:60:c3:22:69:43:f1:ed:fe:db:68:f7:19:dd:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:22:28:E1:0E:C6:8F:7D:EF:FD:78:DA:CA:32:BD:52:F2:4C:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a843ba6f-f023-36a2-839b-80f64a79fd05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.236.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a5:4e:89:55:a9:fa:c1:e9:e5:11:6b:32:52:a4:f4:c6:3c:
b1:9b:ac:00:96:b8:fe:c7:20:7b:57:d2:15:6f:4a:68:9d:35:
29:9f:73:71:09:aa:0d:8c:be:16:af:cb:e7:4f:23:2d:c7:b8:
80:55:00:fb:50:82:11:cd:71:35:42:09:28:64:96:27:6a:53:
d2:e4:4b:15:6c:b9:31:d3:4b:df:90:3b:0e:40:6f:66:c4:a9:
b8:52:0c:ab:b7:11:62:ed:1e:c9:d1:b3:b2:4a:80:7f:1a:f3:
31:a1:58:bb:f3:ee:1a:29:0c:ae:8b:1a:5b:61:b1:a7:1a:10:
47:58:b7:ea:34:22:71:7f:04:fe:49:a2:a4:81:c0:ea:1c:6a:
ba:63:4a:1d:6e:e3:3b:5e:8b:29:6d:93:e0:2c:fe:52:fc:51:
45:73:39:39:7c:4e:63:c7:b7:7e:82:61:df:b4:ec:36:45:58:
b9:45:f6:b0:91:b2:84:30:7b:b4:68:9a:bb:ed:2a:64:a9:62:
7c:48:63:8f:74:28:07:9e:55:83:ab:62:70:ce:f4:7b:93:9f:
0e:71:17:23:f6:fd:1c:6d:3d:a5:ce:60:31:09:09:14:57:4b:
81:e8:71:c9:8d:6b:c0:d1:d1:5d:3f:d6:bf:10:88:90:41:6c:
f9:6d:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:07 2025 by rpki-client