Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c5b1ef-b867-3304-b61a-b39cdc5b32db.roa
File: b1c5b1ef-b867-3304-b61a-b39cdc5b32db.roa (raw, json)
Hash identifier: E9Q0Zd+MTXIgIaoyxkPdYgTSGl2tq0UpVy3Tfq9UU2w=
Subject key identifier: 71:89:80:3A:E2:D7:EE:54:64:CB:BE:A0:0E:D0:A5:DF:7B:4B:13:AC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285840A461A7FB110926F79EE5BD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c5b1ef-b867-3304-b61a-b39cdc5b32db.roa
Signing time: Thu 19 Jan 2023 12:00:00 +0000
ROA not before: Thu 19 Jan 2023 12:00:00 +0000
ROA not after: Wed 23 Apr 2025 04:00:00 +0000
asID: 396982
IP address blocks: 35.200.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a4:61:a7:fb:11:09:26:f7:9e:e5:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 19 12:00:00 2023 GMT
Not After : Apr 23 04:00:00 2025 GMT
Subject: CN=412c7105-0cbd-4bcc-8af5-b5f891b6e7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:08:b5:16:70:d4:49:59:14:c8:3a:5c:d8:
9a:05:74:de:88:d8:99:f4:c2:5e:bd:b2:df:c4:1f:
ae:f2:96:96:b9:23:52:f1:00:8f:cc:44:2f:7e:66:
26:5b:71:b4:b7:29:ce:69:ce:ad:9f:00:87:36:6c:
a4:a1:39:c5:d0:cd:b8:24:f6:48:e5:c5:db:70:b8:
12:7c:7e:7b:93:53:15:a0:01:c4:e3:b8:df:66:c3:
d8:5b:19:34:69:bf:b6:99:2c:3e:0d:26:7a:25:d2:
10:78:63:48:29:2d:eb:5a:03:c2:98:41:11:5f:43:
35:af:39:09:28:c2:f7:2c:44:70:d4:7c:a1:38:46:
91:2c:c0:b5:bd:08:28:10:36:a4:86:a6:1a:1a:c0:
b4:45:b4:d9:af:da:88:a8:e5:76:21:89:52:b0:07:
8b:81:a1:24:5c:1b:f6:88:ef:d9:0a:70:53:75:9b:
41:18:ca:27:bc:67:d3:51:b0:a1:34:c2:7b:80:58:
4b:1b:6b:38:90:94:ab:00:59:d0:a1:11:c2:98:80:
45:53:a8:22:fe:86:8b:d3:ad:ec:f8:45:47:60:d2:
2b:6a:b0:a5:72:39:2a:f6:f2:44:5a:1d:92:a0:91:
45:aa:3e:c4:96:76:b2:2a:d6:43:9d:e6:19:8d:59:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:80:3A:E2:D7:EE:54:64:CB:BE:A0:0E:D0:A5:DF:7B:4B:13:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c5b1ef-b867-3304-b61a-b39cdc5b32db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.200.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:58:f9:c4:fd:2f:61:b7:c3:db:6a:ec:0d:c3:2b:75:d7:d9:
f1:20:53:0e:b3:c4:75:6b:35:54:f6:c8:cd:ac:ac:b6:25:a9:
3d:3a:83:d8:74:ab:0c:30:6f:d9:f1:c9:92:5a:63:4f:32:e0:
91:2c:47:ed:be:be:c5:50:19:93:ff:dd:53:ab:ff:ba:1b:9d:
ea:23:4f:5e:48:4b:e4:d2:e1:d4:c2:8a:87:a3:f6:3e:fb:a2:
0d:a2:4a:17:d7:28:7e:54:1c:95:bc:b1:e7:91:ca:9a:d9:ff:
28:62:e0:44:bf:1e:41:95:ca:10:f6:48:d4:cd:db:6f:49:4f:
c2:24:cb:27:1b:11:f6:b9:52:34:70:6c:88:35:fe:b0:2b:ce:
58:c4:74:54:19:2e:98:37:e2:87:70:59:ff:9b:aa:f6:fa:ad:
a4:1f:35:85:cd:e7:cc:dd:d2:da:13:ed:ea:5f:e8:05:bb:52:
0d:19:d5:1c:5f:d5:23:bf:9c:36:e4:25:86:27:a3:6d:f4:69:
d8:a3:3e:35:be:ef:37:dd:89:1f:3a:ab:9e:0d:64:e2:d9:37:
a0:08:7f:ee:81:b7:53:2b:99:36:fe:81:5b:ac:1c:5c:1e:23:
88:72:9b:23:57:f1:04:4f:b6:74:5b:a8:2a:ec:ca:e4:49:05:
73:aa:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:19:02 2025 by rpki-client