Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e70763fc-d426-3e68-a3ed-12609ef7f96c.roa
File: e70763fc-d426-3e68-a3ed-12609ef7f96c.roa (raw, json)
Hash identifier: tGwNislDFFNAEBd4oyks0HtUaLjCG44PvP5FtXtGEKE=
Subject key identifier: 22:0B:8A:42:D2:DB:3A:3D:F5:3C:3D:25:0D:3E:42:50:78:0E:73:A6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6FF177D8B79E0ADF15C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e70763fc-d426-3e68-a3ed-12609ef7f96c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.240.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6f:f1:77:d8:b7:9e:0a:df:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=f5a3d55d-40e2-4b3a-bcf0-361d3f42ae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:7b:31:61:07:ff:32:57:f9:73:44:15:72:
9a:4d:a3:28:13:67:8a:4f:38:7a:54:3e:c3:9c:07:
40:8c:cd:fe:74:54:20:b9:13:d7:43:5b:fb:f5:09:
c5:94:78:f4:0c:6b:6c:52:fb:d7:74:64:05:d7:8e:
9f:1d:c1:81:4d:de:6a:ae:d6:52:61:e2:3d:1c:14:
3b:5c:52:2a:2e:a9:c7:2e:d9:7a:13:32:bb:f4:3d:
ed:c8:66:2f:3f:20:d0:03:bb:1d:0f:0d:18:60:62:
71:9d:e6:a8:7b:fa:ea:b5:f7:f0:c9:ee:58:a2:7a:
c8:2f:8b:f4:39:54:16:7f:7a:c3:70:87:9c:ea:ec:
56:c6:31:9c:1e:c2:40:17:e0:e7:4e:0c:62:93:04:
6f:47:69:a5:1b:54:1d:7a:f6:c1:d0:81:f9:bc:ce:
a2:31:f2:a7:60:96:aa:47:a3:06:14:44:0f:67:a7:
06:3a:9e:42:e1:6f:71:53:0d:b3:60:1c:19:44:71:
09:03:5d:9c:33:e4:75:78:6f:72:4a:56:ab:bb:f8:
86:c1:ec:4f:28:d9:4d:81:0f:dd:b9:c4:2f:fd:2e:
c5:29:6e:5a:94:d8:07:54:ce:8f:36:f7:87:89:ed:
e2:6e:76:bc:35:c4:41:16:0a:0c:7f:0d:3e:e0:e3:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:8A:42:D2:DB:3A:3D:F5:3C:3D:25:0D:3E:42:50:78:0E:73:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e70763fc-d426-3e68-a3ed-12609ef7f96c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.240.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:5d:2b:33:26:30:d6:5b:75:3a:90:c1:1c:c8:a8:7d:8c:1b:
9c:69:e6:d3:af:b9:4b:40:36:fa:85:26:d2:e8:73:4d:96:06:
25:23:a3:6d:e6:cf:d7:b2:a1:a4:30:75:86:b4:cc:c6:74:00:
30:0a:ac:9d:5a:bd:d4:de:3a:9a:0a:4d:20:ca:d6:fe:aa:85:
19:9c:b8:5e:3e:cb:c6:11:a5:bc:10:c3:c8:da:57:cb:f4:80:
b0:6b:06:46:ef:4d:e1:6c:76:ec:ac:72:17:d2:5e:fb:52:e7:
a0:c0:e9:34:7b:92:46:6b:15:1e:fd:1e:48:9e:94:30:d2:c6:
86:40:6e:3d:93:df:d9:b5:59:4d:02:6e:c5:ec:c6:be:b4:2c:
79:82:de:2b:da:11:e2:d9:01:db:47:88:e8:3a:98:d1:96:8c:
5a:db:00:02:2d:50:e0:bd:34:1c:89:6e:59:2f:c9:4d:27:25:
4a:10:13:c1:d9:30:2b:0d:58:45:6d:9d:dc:49:8d:aa:29:9e:
ce:03:39:41:db:91:a3:e4:36:d0:07:04:52:8f:03:62:ce:77:
c9:9d:bc:fd:a5:97:0b:dd:85:2a:7b:45:eb:97:02:b8:eb:e2:
a8:8a:04:e2:eb:78:5b:a3:9f:d0:ee:ef:63:24:73:b5:d9:c3:
ed:36:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:50:05 2025 by rpki-client