Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddbc1c93-92b4-3fa8-a2fa-2cbc59fc76e6.roa
File: ddbc1c93-92b4-3fa8-a2fa-2cbc59fc76e6.roa (raw, json)
Hash identifier: f6XcAUtA47kruFwvw/6ate1wnlqQiUqgClvJf5DLHYc=
Subject key identifier: 02:0C:77:C6:F5:58:6A:E4:4C:18:7B:7E:93:70:AA:CC:D6:5A:3F:21
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5B2FD58D0756C1CC9400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddbc1c93-92b4-3fa8-a2fa-2cbc59fc76e6.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.226.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5b:2f:d5:8d:07:56:c1:cc:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=3536e563-cfa0-4abf-9afb-330a6d63fded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:3f:93:7d:d0:93:52:17:3e:d4:4a:55:5b:
15:8b:87:1b:4c:ee:7a:19:99:5a:0f:e5:39:b6:b5:
bc:2f:5c:c3:87:d5:1d:86:b7:93:5e:a6:b0:28:af:
47:05:d3:7b:9f:dd:fa:f4:89:3d:11:96:4d:9e:bc:
7a:e6:75:f1:f8:90:94:97:4a:d6:a9:04:7f:a8:e5:
68:6a:dc:4f:21:f1:47:9b:96:6e:0f:53:15:94:3d:
72:7f:ba:75:81:9d:4d:98:60:63:14:c3:e7:d8:9a:
fa:d8:e8:87:a9:97:64:eb:05:55:bf:fa:94:a4:17:
f7:c3:fc:bc:af:84:6c:a5:25:e2:82:d0:db:6d:ba:
b9:d2:c7:36:65:c6:6a:1f:4e:4e:46:44:d1:80:59:
f4:2a:1e:82:62:82:77:50:f0:d3:0c:5f:59:59:0b:
ca:f7:ff:e2:7f:04:bd:0a:ba:eb:e2:6d:58:b4:d9:
9c:6d:8b:63:33:15:c2:0a:73:2f:d7:eb:1e:b8:d7:
e6:7c:ec:df:8c:16:b3:71:b1:33:94:cb:8f:5a:ca:
24:92:74:db:ee:6f:98:91:b9:77:e5:5c:a7:73:b8:
4f:5a:7a:f4:f1:e3:0b:16:4d:72:18:b7:fe:9b:ed:
7e:6d:22:4c:f0:8d:88:16:51:f9:c1:79:cb:71:e7:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:77:C6:F5:58:6A:E4:4C:18:7B:7E:93:70:AA:CC:D6:5A:3F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddbc1c93-92b4-3fa8-a2fa-2cbc59fc76e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.226.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:51:6a:e8:11:26:07:e6:e3:4a:90:43:a1:37:b0:49:d4:9e:
e9:7a:31:9e:9b:74:9d:34:90:66:25:0f:b5:fe:1f:ea:f5:6e:
79:3a:82:fc:ff:5e:87:a4:6a:1e:2a:e4:72:8b:4e:48:72:11:
01:47:df:0c:e9:af:56:8d:45:36:4b:e9:eb:3b:fd:15:a6:a8:
84:21:46:87:da:e0:9d:14:da:70:2e:de:db:08:6e:9f:4d:38:
02:08:36:3a:8c:de:1d:4b:b1:5f:de:60:da:06:85:b6:e6:31:
eb:ba:90:cc:58:42:47:8d:95:ca:39:a8:3d:c2:b6:82:d4:ca:
91:cb:99:e1:86:aa:c1:2c:e2:38:3b:34:60:1d:a8:6b:91:f7:
10:05:a3:e4:21:58:b7:a1:34:76:a4:05:c8:9f:52:37:a2:3a:
8d:be:54:76:a8:c7:a3:2a:b2:6b:b9:df:bd:e2:29:ec:87:e4:
03:e6:a8:1c:7a:98:57:dc:28:d5:92:fa:c1:d4:16:94:2f:92:
62:4c:24:74:ba:b1:25:0e:7a:98:98:b0:ab:1d:d4:74:de:1c:
1e:80:c6:2a:47:65:6d:87:76:e7:28:e9:dd:0d:93:9a:ce:6d:
96:13:29:dc:bb:e0:a7:dd:79:1f:9a:e5:0a:64:cb:d6:11:a3:
e9:32:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:15:56 2025 by rpki-client