Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac5e9e8c-f75e-3b10-a1ec-de13d4282c62.roa
File: ac5e9e8c-f75e-3b10-a1ec-de13d4282c62.roa (raw, json)
Hash identifier: xNCGlDBUqEyQrBCn+msvUFmYZ6x8V+GIeE+aCC/uvEI=
Subject key identifier: 8B:1C:CF:D7:60:FD:54:78:D2:26:11:46:7B:E3:8C:AB:FF:BE:B1:95
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EB2A8F5165C2D0ED1648A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac5e9e8c-f75e-3b10-a1ec-de13d4282c62.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.199.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:2a:8f:51:65:c2:d0:ed:16:48:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7b21cbd2-a462-43c9-83d0-446f08a449ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:0d:2d:e2:bb:dd:ab:4a:72:b2:51:79:75:
fa:70:b0:29:08:21:72:97:1b:08:d9:e0:f7:79:ea:
02:59:3e:05:47:e3:3e:b1:ce:74:1b:e2:49:f1:c2:
2d:f0:25:ed:ca:bc:3f:7d:54:7d:3d:24:03:2c:8b:
aa:b7:21:75:ef:e1:08:10:96:3a:d7:e6:f9:bd:4d:
3f:75:aa:d7:4f:15:03:11:d2:a0:90:f7:46:aa:1e:
56:09:08:12:b5:34:54:a7:4c:b1:74:3f:a7:ab:45:
5e:c6:bc:68:bc:54:6b:5e:54:be:ca:fc:89:eb:ac:
f3:db:1d:45:40:b2:b5:09:49:62:fe:f3:95:b2:be:
ae:79:ed:80:8e:1e:36:e4:36:f0:14:51:77:f9:08:
78:f1:d7:3c:a4:8e:cc:da:80:53:cd:28:c2:d0:43:
de:bc:3e:54:a8:f3:7a:f2:d5:12:42:9f:6d:20:4b:
63:9c:21:8e:f4:53:66:95:ed:e5:2d:81:3c:ff:e7:
ca:c5:c5:86:57:a0:a9:a7:39:39:94:9e:cc:0c:5f:
99:0a:6c:a4:e3:aa:8e:b6:d7:2f:8c:71:98:aa:a1:
97:f0:43:9a:3e:a0:ab:41:8b:72:5c:22:e3:b3:21:
47:a9:2a:38:86:ac:d9:0c:ad:53:7f:86:b2:8f:de:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1C:CF:D7:60:FD:54:78:D2:26:11:46:7B:E3:8C:AB:FF:BE:B1:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac5e9e8c-f75e-3b10-a1ec-de13d4282c62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.199.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:78:fc:15:dc:66:08:5d:2c:17:5f:a4:dc:7a:d9:07:b8:f1:
79:88:14:a2:cd:f0:92:08:d1:db:99:98:f1:7e:af:aa:02:55:
0e:ee:cb:85:8b:9b:03:87:38:8d:2e:bf:8a:d3:ed:8f:a6:69:
68:f7:a6:5d:c8:d0:a2:4c:52:a0:64:e3:73:8c:c7:9b:90:27:
82:9f:8f:3c:c8:97:05:68:4a:9c:99:3c:e4:b2:2d:a6:51:3b:
c8:e7:83:8c:82:57:c1:6a:e7:fa:bc:4b:15:27:74:89:2f:cc:
82:9b:04:7e:78:ae:df:d5:90:be:62:df:9b:4e:f8:8a:56:51:
f6:0f:1e:d3:96:7f:01:03:25:20:fd:ef:f6:db:e2:e1:5a:ff:
a0:af:b4:a9:24:21:b8:95:cb:8b:02:18:31:c3:cd:fc:9f:9d:
21:ac:d8:3e:b9:71:da:90:ad:83:ff:d3:60:5d:22:4d:e2:cf:
76:9c:58:90:31:24:59:09:fd:de:44:c3:3f:97:60:66:2d:81:
df:ea:6f:a1:df:18:42:5b:e9:4d:fa:20:5b:20:27:07:10:35:
65:64:77:67:c0:59:c1:22:c4:72:af:07:ab:6b:68:16:36:a2:
1d:85:3b:91:4d:c2:f8:bb:7c:1a:e2:74:e8:06:c3:f7:dd:f2:
92:4f:85:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:09:42 2025 by rpki-client