Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a97b8830-136c-32fa-8579-5b59c40a1a08.roa
File: a97b8830-136c-32fa-8579-5b59c40a1a08.roa (raw, json)
Hash identifier: 4Fyg6ChyIDD29t4FQNByhfXp3usRVD0CmwbFvIl1nIE=
Subject key identifier: B0:E8:34:E5:DF:9D:9F:25:EB:F3:A0:F9:B7:D1:0E:84:1C:7A:F3:6C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0D76EA8747FAF048DA49C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a97b8830-136c-32fa-8579-5b59c40a1a08.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.224.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0d:76:ea:87:47:fa:f0:48:da:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1af74bdc-f7e4-4afe-b6ea-5fd2ab30586c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:ae:dd:01:ee:e0:79:07:31:7c:19:e5:f7:
64:75:9e:23:0c:12:6e:b2:af:1a:9f:df:c3:ce:2b:
e3:cb:f0:ac:b9:b8:e0:bc:f2:07:a0:64:23:e3:5c:
1c:0b:0e:64:65:77:0d:2b:7b:3f:19:6c:31:5b:76:
66:f0:9e:17:23:9b:d9:1e:fa:78:7e:9a:ec:91:c6:
8c:36:42:be:79:e8:e1:da:b7:1b:85:e9:cd:c0:1b:
12:22:33:98:cc:72:08:3e:32:e4:23:3d:d4:88:b1:
9f:5d:0e:44:3d:86:a5:b3:c7:2c:4c:ad:fd:fb:c9:
b5:31:6c:59:82:a4:d9:41:4d:bb:e0:24:24:1b:db:
40:4f:de:4c:02:41:c0:2f:ce:e0:a0:91:35:fd:ae:
05:8e:e5:51:5d:8e:27:55:bc:09:73:19:e6:1b:01:
c6:18:7b:3e:92:39:d7:69:f1:21:c3:73:60:bd:9a:
de:bf:bc:1b:e7:6b:bb:a7:c1:03:15:37:47:7d:38:
55:88:90:51:79:a3:ef:0b:90:b8:9c:8e:8c:db:cc:
02:d5:4d:95:e9:c2:90:31:ee:c0:eb:a7:a0:03:3c:
fa:f6:af:1b:9c:27:2d:6d:4b:b0:f8:1f:c6:24:3f:
9d:ff:8e:4f:cf:93:9c:34:b3:65:1d:94:40:a0:e9:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:34:E5:DF:9D:9F:25:EB:F3:A0:F9:B7:D1:0E:84:1C:7A:F3:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a97b8830-136c-32fa-8579-5b59c40a1a08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.224.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:b5:dd:1d:b6:6d:f8:81:99:58:4a:47:d5:e0:34:1d:5f:0f:
6c:79:d1:28:c3:6a:69:c7:a9:4d:5c:60:37:03:f3:72:c1:34:
ae:25:24:65:95:d2:ac:83:38:c7:97:e8:28:a7:32:4e:de:bd:
61:49:e2:6e:aa:8c:b2:0d:e1:47:8b:03:0c:f9:bd:fa:29:6a:
7d:50:f2:ae:ab:b2:f4:f4:ef:b1:9a:dd:be:8e:69:4a:73:f5:
f1:0f:ba:d4:c0:cf:5c:70:97:5c:bd:ba:2c:ff:0f:43:9a:8f:
af:d9:41:ad:97:5b:89:d1:03:d0:86:84:a9:72:95:17:81:48:
eb:5e:34:61:af:d9:d0:45:68:63:51:84:e3:5d:d2:7f:33:b9:
82:b3:63:6a:52:d0:0c:c1:da:bd:49:29:4d:9e:8c:cd:28:76:
e8:68:2b:87:1e:bb:16:1a:8f:5b:98:79:dd:b6:71:4c:fe:b4:
4c:fa:12:dc:f1:ff:e8:16:2a:15:fa:5c:44:76:d1:d6:50:3e:
20:de:45:d4:cd:38:92:98:60:65:85:6d:91:fb:0c:66:9f:68:
26:4f:84:e7:66:10:74:7a:b3:a6:73:8b:c5:62:22:08:b2:de:
64:2a:e6:2e:34:04:a6:19:e9:15:ac:19:93:cd:86:df:10:ab:
85:62:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:47:49 2025 by rpki-client