Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca3705a3-23f3-3c3d-b3a7-ec181b22f68d.roa
File: ca3705a3-23f3-3c3d-b3a7-ec181b22f68d.roa (raw, json)
Hash identifier: NgUo0qVB2U+jMa5sFfgOOq2NEksvLbYbnmU9y+uWvTQ=
Subject key identifier: 0A:8B:19:0F:41:77:1C:D2:ED:8D:BC:DA:11:19:D8:94:B6:4F:62:82
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0D9F28A41CE4B1801CD980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca3705a3-23f3-3c3d-b3a7-ec181b22f68d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.205.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0d:9f:28:a4:1c:e4:b1:80:1c:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8f6a2df5-1003-48aa-8d03-3cccdb7313b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:9b:bd:12:40:16:9e:a7:07:f4:eb:0f:c5:
bf:88:8c:6c:e7:1c:c4:6a:95:49:e0:5e:ed:19:9a:
6a:e1:94:6c:0c:6e:c6:6e:70:ee:02:26:9a:3c:e8:
3d:0d:3f:b4:4d:22:10:5b:a4:84:17:5c:be:b4:cb:
c7:5e:fd:43:c5:2f:a8:41:a0:b4:04:3c:c2:97:60:
a8:be:99:9e:5d:3a:9b:31:23:22:38:d8:84:33:21:
45:1b:b2:e1:6c:29:c7:77:b6:df:89:3d:a7:c0:b0:
bd:9c:28:74:c8:22:a2:14:fa:3e:bf:5f:ed:29:aa:
d5:2d:17:88:82:6c:06:b1:44:06:7b:e5:26:30:cd:
a5:c9:13:51:d3:e0:75:c1:28:15:07:d5:50:23:15:
06:61:c6:a4:3e:b2:fd:5f:95:26:50:15:21:a0:53:
3c:fa:a5:a7:f2:12:13:0a:6c:21:6f:2f:8f:99:c0:
18:64:65:42:44:2f:1e:74:4b:af:73:7b:22:d4:dc:
86:9c:bd:36:5b:37:1f:6a:bb:2d:82:ab:66:69:37:
b7:dd:90:63:c7:0b:f8:03:09:79:f9:bf:71:87:54:
d8:aa:a9:4c:cb:cb:50:24:35:db:11:27:99:72:76:
d5:21:18:3a:fb:0d:a0:6f:60:44:9b:dc:e0:e2:98:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8B:19:0F:41:77:1C:D2:ED:8D:BC:DA:11:19:D8:94:B6:4F:62:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca3705a3-23f3-3c3d-b3a7-ec181b22f68d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.205.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:1d:97:b7:77:95:63:58:77:2a:b4:ea:e2:c5:75:f5:ea:39:
ec:1f:1e:aa:27:58:21:44:22:66:16:0f:4f:b3:44:7f:e4:1b:
de:40:3a:50:5b:a2:ea:f6:19:32:30:74:da:25:05:c9:77:89:
74:1f:31:06:75:1e:4b:09:8a:e9:c4:27:c6:4f:67:98:c6:dc:
df:06:f2:8a:eb:23:8e:bc:69:6f:60:cf:a5:63:e6:19:05:16:
e5:e4:b4:f9:69:0a:fe:42:f2:f6:5a:52:73:fd:f3:6e:f9:0f:
8f:27:25:20:13:03:38:86:63:28:07:fb:fe:f3:27:36:ca:24:
50:79:f5:31:8e:18:bc:e6:56:4f:b7:63:47:7d:ba:2b:a4:fd:
c9:4e:2b:8b:ea:fe:1a:f7:f0:18:ba:e6:be:ed:07:1f:b5:52:
c2:95:d0:79:06:8f:47:6b:e3:08:5a:bc:c5:d3:1b:30:de:81:
6f:eb:75:17:81:41:8f:78:67:b0:db:77:c5:26:ab:14:98:5f:
87:ec:dd:80:b3:01:5e:ec:ae:c5:73:a3:4a:21:fb:fa:bf:60:
35:b0:2b:8b:95:f7:51:39:85:b8:97:06:95:7d:a8:82:26:c2:
d1:99:53:a3:6f:c1:65:6b:a6:8c:e9:cb:8b:0b:2e:02:c6:7b:
53:7b:98:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:16 2025 by rpki-client