Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6f47595-d107-3521-8d62-b82a8ccc1b5a.roa
File: f6f47595-d107-3521-8d62-b82a8ccc1b5a.roa (raw, json)
Hash identifier: cvRSRc79fktZs8CzgOwCTmHVi2Qo/n02ofIzBGENfHU=
Subject key identifier: 16:EF:2A:7F:66:07:4D:BB:EA:08:2F:D6:8A:FE:D5:94:9A:EA:C4:09
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A04EA1CF092AE2E0EA4BE60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6f47595-d107-3521-8d62-b82a8ccc1b5a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.228.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:ea:1c:f0:92:ae:2e:0e:a4:be:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bfb2ece7-ea7f-4003-9214-bd12f9b75e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:72:65:ab:f0:a3:31:fb:1e:7b:83:05:00:
bd:75:80:56:d2:d2:57:1e:5a:1d:f1:bc:bb:da:07:
eb:95:a7:b9:fc:2b:63:e3:f6:e7:6e:80:f4:80:40:
43:5d:5a:4e:52:65:c8:3b:d5:09:b2:38:e8:b9:3f:
e9:21:f4:09:99:f8:a1:80:c4:91:6d:4c:27:6c:bb:
e2:cb:ce:3e:1b:f4:74:80:c4:95:0d:27:38:19:d6:
33:68:8f:de:fb:69:a5:06:2f:e8:46:af:28:c2:e8:
18:8e:1e:ed:3a:64:18:72:41:df:72:b4:64:e8:f5:
3b:fc:90:54:60:3f:77:c1:bf:6c:4f:3e:27:dd:61:
73:5e:aa:3b:25:eb:23:97:7f:2f:aa:bd:92:82:c6:
37:4f:d6:97:8f:ba:59:45:4d:e2:13:75:c1:6d:97:
30:5a:41:46:c7:83:a3:db:94:14:c9:17:b3:dd:28:
c9:ea:f8:23:93:92:fd:85:42:f1:52:b0:6f:96:47:
58:bc:fc:17:df:23:d1:26:00:37:60:14:cd:34:6c:
ff:2f:f8:cf:3f:63:89:92:8b:d7:e6:a8:8f:ae:bb:
5a:09:43:ed:28:ef:52:b7:97:41:53:bb:a5:3f:ba:
87:46:7d:7d:36:50:7e:94:dc:12:e9:68:a7:11:40:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:2A:7F:66:07:4D:BB:EA:08:2F:D6:8A:FE:D5:94:9A:EA:C4:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6f47595-d107-3521-8d62-b82a8ccc1b5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.228.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:3e:31:36:67:25:3e:e2:a1:aa:74:49:45:8b:b0:20:d0:ec:
2e:77:94:06:c6:78:6f:51:43:c9:10:12:1f:b7:15:3f:9d:5d:
fb:96:4f:a2:a7:32:04:0c:52:6d:bd:cd:9f:34:b8:0b:21:4d:
86:87:77:b2:cf:26:92:5c:65:8f:ea:44:e4:f1:5f:e4:d2:94:
6f:55:7f:ef:49:f2:08:cd:ff:32:99:e8:7c:d4:6a:6b:9c:c4:
ae:6f:e1:a0:46:ef:58:40:49:c2:e2:f4:6d:18:15:0f:84:42:
53:69:2a:d1:8b:be:c8:47:7a:da:9a:5a:16:1d:b7:0e:dc:dd:
cd:2e:e2:6a:03:33:c8:39:6f:02:6a:49:47:81:7b:d0:aa:1c:
93:aa:03:7f:6f:9e:90:dd:d5:6a:6a:74:99:f4:02:bc:ee:d5:
3d:e6:08:f8:73:26:29:e6:b3:bd:88:f5:f5:d5:4c:b4:07:af:
43:7f:bc:66:20:13:76:7b:a4:77:df:22:6e:bc:78:2d:97:e1:
c2:a3:fb:58:a3:89:99:62:2b:df:fe:72:fb:3e:42:f4:64:4d:
b9:9c:06:0a:09:01:0a:f7:0a:75:26:f3:15:e1:60:7d:2c:fa:
7f:f3:43:6d:c0:bb:48:f4:17:05:12:61:62:48:a2:b2:f3:c9:
80:75:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:22:21 2025 by rpki-client