Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e0a0454f-536a-3703-8ea6-8cbd0f59dc4b.roa
File: e0a0454f-536a-3703-8ea6-8cbd0f59dc4b.roa (raw, json)
Hash identifier: y8g2ZP27PCsZAMsHhgvcxorDnSZNIeNSb3nlUOggsy4=
Subject key identifier: 1F:EC:CA:89:62:17:C7:89:AC:70:92:93:45:37:65:7C:20:7A:37:DA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A195E1CE4C2AEE91E321A20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e0a0454f-536a-3703-8ea6-8cbd0f59dc4b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.196.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:19:5e:1c:e4:c2:ae:e9:1e:32:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=59b02282-7060-4c28-977f-5e770317e217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:b5:85:58:1b:1a:04:41:0f:c4:01:98:18:
a1:73:01:9e:e0:58:f8:14:1f:4a:0e:6d:12:08:e8:
56:0b:e8:d1:de:6e:92:b9:74:ee:1e:12:ef:01:3c:
23:9b:ce:37:5e:dd:50:63:17:4e:76:5f:8b:2e:f9:
e0:f0:7c:eb:42:bb:84:89:b2:99:22:78:b4:76:cd:
80:60:59:d2:78:9f:3e:dd:c9:9b:a1:68:2d:fb:db:
b0:94:18:cc:3f:d3:73:2f:0b:a1:4d:84:1f:52:8e:
e0:82:f9:23:cb:eb:b4:e6:ce:d8:7b:4f:6d:52:c0:
3b:8b:7b:f4:6c:ae:03:aa:5d:d3:5d:f8:d0:a7:52:
01:51:43:cd:b1:36:e0:43:eb:19:6f:48:45:3b:44:
7c:fb:95:2f:75:cb:2c:9f:54:09:ec:d8:ca:a4:35:
61:26:79:b4:b7:59:3b:0b:b5:d6:d5:4d:69:e8:aa:
37:b5:88:a3:58:51:5b:4f:60:d1:39:b5:2b:5b:7b:
16:20:20:97:91:ef:47:bf:6f:82:3a:c9:3b:c8:fa:
c4:74:ad:d4:b3:6c:8e:d3:11:74:79:f4:18:d5:a9:
ac:ca:41:6c:d3:dc:b7:9d:b0:97:81:6b:49:75:da:
7a:28:2b:c0:42:0a:0f:cb:aa:85:09:dc:7c:8d:b8:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EC:CA:89:62:17:C7:89:AC:70:92:93:45:37:65:7C:20:7A:37:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e0a0454f-536a-3703-8ea6-8cbd0f59dc4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.196.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:12:cd:62:02:c0:3e:b4:77:de:12:e6:f2:f0:f5:56:cf:ff:
5a:45:83:cc:e7:1a:cc:c9:7f:75:cc:23:a9:09:fd:8c:40:54:
77:90:34:63:c8:85:98:9b:45:d1:2b:cd:b8:48:8d:3c:87:cc:
4b:8b:33:f4:61:45:b7:16:02:10:1a:e9:1f:4e:a0:b8:b1:03:
25:07:bb:ad:54:c3:62:f5:3b:3e:d2:11:43:e5:69:1c:5d:80:
3c:9c:b6:da:68:88:5c:08:b4:8c:8f:39:c7:b0:ae:8a:a1:72:
57:b4:86:eb:de:b7:47:62:b5:54:e0:3b:f4:68:c6:70:35:89:
96:af:ee:a6:c1:5a:bf:94:3b:4e:4a:dc:bc:c5:80:32:2b:d8:
3f:33:9f:eb:91:6b:5b:65:20:70:b3:20:f3:79:94:a3:78:b8:
a4:0c:a1:79:60:70:5e:83:28:70:9f:90:9a:95:29:55:22:9d:
6a:c4:c4:9a:b4:a5:3c:4f:39:0a:64:f6:a1:ff:b7:35:bd:d9:
0d:72:c0:da:b3:e3:eb:45:41:63:7d:91:55:46:4e:a9:7d:7d:
a1:85:69:3b:6f:54:38:ac:56:59:c3:68:c6:72:19:93:69:43:
6d:c3:dd:b1:77:f5:ae:34:6b:94:b7:6a:e4:05:ef:36:82:e7:
78:a0:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:33:33 2025 by rpki-client