Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d00034a9-b000-38c1-9d9e-354df682973d.roa
File: d00034a9-b000-38c1-9d9e-354df682973d.roa (raw, json)
Hash identifier: Xm7XIyOyBUKcbhn7Bxy+M0ucGAqfgCiQthlmk5Z7lFA=
Subject key identifier: 82:2B:3F:2B:08:E5:19:90:6C:A4:38:F5:28:32:2E:52:5A:38:98:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6B7D6AD2BB9D7D31AC70
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d00034a9-b000-38c1-9d9e-354df682973d.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.186.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6b:7d:6a:d2:bb:9d:7d:31:ac:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=aabce233-0232-4c99-9555-08af087c67f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:49:ea:f4:e3:e9:23:96:40:12:43:7a:83:
af:b3:d7:49:af:6f:36:ba:3e:3c:8e:bc:6b:78:d8:
cd:e9:5d:47:75:e0:e5:09:0a:09:1a:49:64:6b:76:
e9:a9:ce:7b:cd:18:ec:4e:a5:d4:a1:60:d7:2f:9b:
9a:50:3e:dc:0d:e7:21:19:a1:9a:13:94:e5:2c:2f:
c7:1d:e7:ac:87:fb:ef:17:d8:57:20:54:c2:e3:ab:
c2:37:56:f4:3c:81:b1:e6:f9:6c:73:96:cd:bd:32:
d7:15:63:33:98:79:34:99:1d:40:7c:7d:26:4c:f4:
b4:26:9f:89:76:e0:b9:b6:b2:3d:41:a9:bd:ba:82:
81:ce:b0:a5:d6:69:dd:3f:0a:77:e4:f0:36:d7:8f:
b6:47:0f:a2:3f:c0:a3:bb:b9:f8:76:8c:56:d0:01:
8e:8b:69:f1:e5:c7:c0:be:41:7a:19:f9:70:99:82:
c8:47:33:dc:db:ce:94:e2:37:b6:3a:d6:2d:e7:e2:
14:1c:4f:87:55:65:0a:95:89:64:ec:73:49:e6:c9:
a6:78:6a:22:d3:22:da:22:b8:65:3e:de:e1:71:2a:
1a:1a:8d:aa:65:46:9f:4a:f0:9d:e6:50:1b:98:ea:
31:7a:9c:03:f4:f6:71:e0:7e:07:c6:7d:c4:6a:7f:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2B:3F:2B:08:E5:19:90:6C:A4:38:F5:28:32:2E:52:5A:38:98:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d00034a9-b000-38c1-9d9e-354df682973d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.186.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:01:62:44:9d:d5:a5:7a:2b:c6:9d:64:e9:7f:7f:17:0d:e4:
7e:12:71:b9:79:4d:62:01:41:ca:e0:aa:f2:73:a7:78:cb:44:
ad:0b:0b:cd:82:65:41:1d:ed:9e:49:69:f9:f0:0e:0e:a0:b1:
e9:0d:22:e6:bf:36:2e:ba:aa:dc:fc:34:e6:79:89:9c:d5:52:
e7:61:31:85:94:66:32:44:55:36:a3:9e:98:d0:10:08:d6:32:
8d:8f:bb:14:62:6a:8c:b1:a8:a4:f4:2b:ba:0e:70:6b:75:e2:
69:8c:ee:b0:bc:50:6d:d0:c0:97:42:dc:48:06:0a:fc:36:73:
19:35:03:bd:44:a2:80:39:1c:af:f6:54:26:04:ed:fc:49:d4:
e6:17:bd:95:4b:4d:28:5f:33:5d:8b:f1:bb:6c:64:a4:7a:1b:
46:e5:fe:b4:fa:ba:26:e6:43:39:43:72:d6:e5:1a:b9:10:15:
71:1a:b2:30:e0:8a:16:3b:cf:eb:5c:6d:59:c2:68:a5:bc:51:
41:a2:37:6f:c5:34:00:e3:e0:54:c9:91:a2:bc:47:40:d9:84:
1b:df:48:25:b7:6b:aa:6d:fe:7b:a6:1f:3e:a0:a7:d5:e7:53:
76:53:12:ac:ac:f4:6f:3e:b5:6d:6c:b2:c9:0e:4b:8d:23:ac:
83:22:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:35:37 2025 by rpki-client