Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3777f3-b509-378d-8fd8-791566f9b09b.roa
File: ff3777f3-b509-378d-8fd8-791566f9b09b.roa (raw, json)
Hash identifier: GdrVljsciZdQMI+MA0722fGvcmf1IRbeGUglv60Gg9g=
Subject key identifier: 2B:B2:1B:23:5C:F6:BD:72:B9:AB:C4:EB:FB:E0:40:8F:29:1B:61:ED
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F3FF87259C3458616580C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3777f3-b509-378d-8fd8-791566f9b09b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.225.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:ff:87:25:9c:34:58:61:65:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=66ffcbc8-78d2-4e02-87b2-b6221069ab43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:76:93:a3:d2:4e:0b:21:cb:05:b8:77:73:
6b:eb:31:59:de:15:63:4e:58:97:31:7b:9e:dc:06:
57:48:30:c5:e6:61:2e:c1:26:58:ec:ef:23:8a:4f:
23:40:09:b8:60:52:7a:43:82:b4:02:71:e1:7c:38:
36:48:f3:1a:a3:66:c0:42:3d:e6:d3:a1:f9:01:f7:
6c:23:dc:40:8b:c9:c4:4b:ab:86:00:06:7e:33:14:
bf:1a:84:26:7b:dc:76:0d:7e:ef:64:f5:a9:27:70:
be:5b:10:bb:f7:03:98:3d:84:3c:c4:1f:c2:e8:17:
dd:cb:47:6f:34:cf:66:5a:b0:c0:b2:4d:49:4c:13:
ae:4c:32:db:06:59:b2:9b:fc:10:16:7e:7b:6c:b8:
a6:03:fb:fa:b8:5a:b8:44:f7:28:55:b8:d0:ae:86:
17:5d:52:5c:08:43:31:2a:ef:0f:bc:26:d8:ea:c8:
95:09:4f:33:3f:56:2c:12:7c:90:48:f9:0f:dc:d9:
80:30:35:20:6a:b2:e5:19:38:cd:06:fb:ad:70:7d:
39:4b:18:3d:2a:c4:ae:56:4a:6d:ed:60:cd:e0:0e:
44:6c:89:97:88:6a:dd:a7:2a:15:71:e5:0d:a3:49:
0f:26:3f:fc:48:4a:02:ac:b0:19:fc:5f:87:66:ee:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:1B:23:5C:F6:BD:72:B9:AB:C4:EB:FB:E0:40:8F:29:1B:61:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3777f3-b509-378d-8fd8-791566f9b09b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.225.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:44:c6:9e:af:ee:de:c7:30:4a:11:e6:ca:38:25:c1:38:3f:
ae:15:2d:f0:ed:b7:19:89:90:66:f6:93:4d:40:64:db:6f:1a:
c3:a2:9e:27:49:4c:d0:d1:49:e6:4c:a1:38:15:db:ab:a6:ef:
b8:7d:72:f8:aa:09:11:da:49:4b:26:c8:88:da:81:44:19:41:
77:3c:6b:84:94:f3:6e:c2:8c:f5:e5:db:89:e4:37:40:a7:c5:
28:0d:72:79:52:e3:44:85:af:07:59:fb:b1:70:19:70:9c:e9:
52:20:a5:15:d9:64:16:df:88:ac:dc:8f:8e:16:fb:7a:f2:a7:
72:de:ed:83:9e:eb:26:23:db:9e:51:79:70:ed:ff:eb:11:4b:
01:dd:13:59:11:d9:f2:60:9f:05:24:cf:5b:74:54:f4:c8:26:
9b:8a:31:03:8f:39:f1:55:1e:0b:a5:93:5c:22:33:5c:e6:55:
64:38:9b:7e:a8:a3:78:b2:9f:a9:fb:3a:09:07:8b:50:b7:3b:
08:86:50:af:e3:9d:d6:3d:1a:34:7f:f4:34:0e:89:45:ef:ba:
84:0e:a8:d8:e3:18:f1:0f:4f:f3:63:92:dd:51:15:ce:83:79:
f0:b4:63:4d:31:eb:a2:95:54:94:65:05:70:43:75:a5:92:0b:
f9:e0:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:28:24 2025 by rpki-client