Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/135b05b9-1f21-3b8a-947d-be969253deec.roa
File: 135b05b9-1f21-3b8a-947d-be969253deec.roa (raw, json)
Hash identifier: I8AriKoNBJVWDL/MBwUC/NeAiTPEGDQRmhoUuS+6B1s=
Subject key identifier: 92:D2:75:10:71:66:E1:6B:92:F6:57:F5:2E:5B:A8:6B:BE:00:C7:EF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B0CBFBAE82669EA9AD27C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/135b05b9-1f21-3b8a-947d-be969253deec.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b0:cb:fb:ae:82:66:9e:a9:ad:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9f66866a-429f-4505-ae65-ba977854bd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:7c:99:ce:1b:44:e3:3e:f6:e2:09:7a:dc:
93:26:49:13:b9:00:9b:bb:b8:bf:ef:30:3a:d2:b5:
e1:e0:72:85:25:ba:65:7a:e8:32:21:ff:5c:93:c9:
92:b5:69:b6:77:26:71:0a:b9:37:a4:ec:cd:b9:93:
0d:ba:98:a4:d0:2f:00:42:fe:1b:cf:cd:15:9c:f4:
ef:3e:f5:dc:49:e6:e5:ca:cb:b9:08:0c:43:36:86:
53:c0:e0:08:fd:8e:9a:53:40:d7:32:ab:c7:88:9b:
3b:eb:90:3a:64:0b:5a:ed:f9:8e:71:b0:89:99:02:
0f:e5:17:c3:6b:20:82:90:bd:1b:95:3f:49:7a:88:
4f:01:0b:94:0d:9a:02:75:04:ae:2d:ec:3d:8c:47:
f9:16:a9:da:e3:95:ce:6d:d3:a8:8b:26:10:23:c4:
6c:42:9e:c8:c8:a3:c9:5c:72:75:39:87:9d:e3:85:
b6:92:ce:e5:53:a7:89:f7:a6:db:3d:1a:33:5d:7a:
35:69:ca:d0:1e:bc:b0:87:b7:cf:40:f2:a2:3a:a7:
1f:b9:e6:9d:00:54:00:53:2e:6e:33:23:86:6f:3f:
1a:94:3d:8c:a8:fe:53:ae:98:57:f6:9d:0a:c8:ac:
ea:7f:53:6d:c0:6f:aa:9d:fb:20:9d:a6:1e:d0:71:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D2:75:10:71:66:E1:6B:92:F6:57:F5:2E:5B:A8:6B:BE:00:C7:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/135b05b9-1f21-3b8a-947d-be969253deec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:4a:b3:88:a8:a5:d8:ac:76:2f:59:64:6a:b0:71:58:7b:01:
5b:0c:aa:49:08:b0:03:ba:b7:be:07:82:15:e3:2b:6c:17:03:
1f:65:5e:4d:bb:7d:1b:50:61:ac:cd:27:16:df:fa:17:a1:1f:
99:08:65:f3:6f:da:10:41:c4:c9:87:3b:9d:d0:e2:37:2e:8f:
c5:02:e6:de:a7:78:b5:e7:7d:0b:f8:cd:f5:e4:c1:e6:7f:c4:
4d:7a:56:dc:81:30:fa:6b:e5:75:61:3a:03:1c:43:01:a0:13:
d9:50:8a:f4:f9:86:79:77:58:8b:15:94:b9:41:99:2c:a2:0f:
18:83:c0:e0:bc:f9:f4:4d:ef:e8:f5:8b:70:61:6e:4d:5c:a6:
93:36:7f:d3:dc:f1:f2:79:9b:ff:3a:9c:52:8e:69:63:2e:29:
f5:d6:9c:e2:4d:9d:bd:36:5e:79:ae:b3:83:09:56:f6:53:da:
2e:9f:d2:3e:95:cc:52:f6:19:65:0e:b5:41:ba:68:9a:27:c9:
a5:28:6f:9c:49:ee:96:7a:57:68:7a:d9:32:4d:3c:69:f7:0d:
dc:46:7d:84:04:99:cd:0a:73:84:96:41:24:c8:b5:08:25:70:
aa:c5:05:db:68:19:29:d9:62:4f:e0:ce:72:3f:f2:56:f1:f6:
63:cf:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:40 2023 by rpki-client on console-fra.rpki-client.org