Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec039923-03ca-3c39-81a2-29861ab1519a.roa
File: ec039923-03ca-3c39-81a2-29861ab1519a.roa (raw, json)
Hash identifier: QI26RqgLrjutkp+PaOcpFdX+n2xakBJDLaiheFkIjjo=
Subject key identifier: 68:D5:41:0B:C4:0C:47:92:B3:7B:97:FE:15:DF:BC:1D:B7:28:E5:08
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EF3127CE0C2ADFDFB82300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec039923-03ca-3c39-81a2-29861ab1519a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.235.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:31:27:ce:0c:2a:df:df:b8:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0f1c3c0e-9c38-4d72-86b3-d265bb284b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:d8:d1:35:7b:44:6c:e9:e4:4a:64:da:f2:
12:05:49:f0:f2:40:c3:df:8b:f1:14:72:4d:04:ae:
ff:41:ec:b3:70:25:62:13:09:89:9e:27:b8:7a:82:
b1:f2:47:6d:78:ec:e7:08:c7:f9:d7:26:32:49:da:
fd:d7:2a:e5:5f:35:8a:4e:f9:95:c8:df:22:43:8c:
9d:88:83:38:b6:85:29:a7:6c:ed:20:e2:06:13:d3:
ed:44:75:f9:e7:4a:20:07:51:99:ff:47:c1:b9:86:
f2:19:58:25:1e:71:dd:15:b7:1b:9a:59:a9:81:b4:
95:10:77:c0:37:68:35:b1:59:9a:9c:c7:f4:e7:d2:
5c:0a:c0:97:f6:d9:d8:52:6e:2c:24:73:79:84:c1:
e1:3a:a5:3e:8e:c7:c9:cd:98:5f:f7:7a:19:92:89:
bb:5f:c1:5c:b1:61:15:ba:99:d9:d0:ea:8c:66:2d:
f7:14:53:c2:88:73:d9:cf:e9:78:4d:de:9d:6f:69:
fe:7c:ab:6c:63:87:64:b1:a9:8d:d5:75:3c:0f:15:
65:fe:21:e8:28:78:90:08:3e:50:f2:6e:54:00:f1:
90:2c:c3:2c:86:33:b1:d0:d8:87:90:bb:0e:a7:e2:
cd:c7:49:16:ca:3e:aa:f4:43:2d:22:9a:ed:e9:cd:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D5:41:0B:C4:0C:47:92:B3:7B:97:FE:15:DF:BC:1D:B7:28:E5:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec039923-03ca-3c39-81a2-29861ab1519a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.235.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:eb:cb:28:bd:22:79:23:95:3b:62:0a:1c:b2:eb:bd:da:e9:
9c:5e:7f:22:df:13:a2:2d:3c:ba:13:81:c2:34:7b:75:6f:18:
b1:db:ec:97:a7:8b:40:76:48:bd:20:40:44:cc:ca:91:34:9f:
3c:a1:c0:c8:c3:7e:b7:2c:71:e6:37:11:80:19:23:8f:75:44:
43:c7:0b:dd:73:b1:c8:3c:e9:ae:60:51:93:d6:5c:9d:00:3e:
0e:37:e4:16:a2:12:d0:d5:83:f6:14:a7:d6:86:9c:3d:67:b9:
5b:9e:49:e7:8b:9b:64:c3:ce:86:d9:f6:36:35:4a:9b:72:cf:
ee:69:00:47:7c:81:b6:eb:42:83:8d:28:e9:bb:9c:85:91:a1:
06:fb:5f:4b:90:ea:2b:6e:a8:3a:9d:af:1d:c2:f0:91:e0:90:
1c:19:78:66:3c:2a:76:ae:ee:28:77:d4:7e:c4:ca:52:73:dd:
39:3c:0c:d6:cb:18:e6:50:90:c0:51:96:e6:40:d9:ba:4b:bd:
9b:fd:f3:2e:1a:a5:d3:df:be:f4:56:91:a8:99:5e:f7:01:12:
f4:ab:c0:35:1e:41:54:5e:4a:43:7a:e4:e7:70:30:1c:4d:f2:
7d:fd:cc:f5:60:4f:d6:e9:8b:8d:e2:47:62:56:4e:b9:f6:36:
f2:1e:13:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:33:06 2025 by rpki-client