Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d151989e-3082-369f-af10-3d0bf3c21bdc.roa
File: d151989e-3082-369f-af10-3d0bf3c21bdc.roa (raw, json)
Hash identifier: yXNYsOmB7R5hA97dyETQ7B5b4UzdGf3Sm4SNyEPwHa0=
Subject key identifier: F0:AC:3E:36:28:AA:5A:08:07:29:59:16:04:6D:25:09:A4:DE:FE:02
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C18FC3754CD0E8A2925FF8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d151989e-3082-369f-af10-3d0bf3c21bdc.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.205.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:8f:c3:75:4c:d0:e8:a2:92:5f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=935b1107-d2bf-4dbf-8741-f132a193fbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:eb:58:61:23:01:4e:2a:70:ce:db:4f:96:
cd:98:d0:18:81:a3:ce:e2:45:af:b0:0c:23:0a:49:
bc:cc:b9:be:e2:02:79:cc:df:d3:20:22:3e:58:e3:
72:90:85:e0:98:96:37:8c:7c:5f:72:d3:c5:87:e9:
58:d7:37:6b:93:c4:91:09:b8:fe:36:22:13:9a:d8:
b2:cc:56:53:1f:82:2a:5d:b4:b2:29:5a:d8:01:d2:
91:dc:17:ca:3a:9a:3b:bb:0f:9a:0c:d5:3f:63:82:
f2:d1:f5:04:1e:1f:ec:39:88:12:2d:7b:fe:bc:36:
5f:10:ff:25:58:49:5c:52:76:12:9c:42:e8:0b:72:
c6:79:16:d3:be:3a:c2:3f:7e:66:d8:95:26:d4:58:
ad:05:ce:f6:fe:66:88:77:25:d0:ad:46:62:6c:3b:
e9:3f:f4:ab:0d:93:38:5c:4f:b4:3a:5f:82:f5:3c:
c9:52:66:69:0f:e1:04:08:b8:7d:64:8e:a4:a1:90:
35:28:7b:ac:40:68:b9:e0:c1:a8:6c:3c:4b:55:59:
3c:b2:57:3e:1e:17:74:9e:26:b7:29:0e:4f:b2:f3:
bf:9e:7b:95:ab:dd:94:54:53:df:09:f3:cc:c7:79:
f6:e7:7e:6d:be:17:cf:51:00:ca:b2:11:80:5f:d6:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:3E:36:28:AA:5A:08:07:29:59:16:04:6D:25:09:A4:DE:FE:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d151989e-3082-369f-af10-3d0bf3c21bdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.205.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:0b:f1:82:b9:bb:a3:ea:e7:c9:2e:78:f4:5e:6f:10:5c:2f:
11:a5:71:5f:58:0b:91:ab:7b:18:9e:6f:81:a2:f6:39:73:9d:
05:b6:c6:d7:1e:59:fb:78:3d:e3:44:f5:2e:5c:9b:11:a0:7b:
69:26:5c:9a:17:ba:97:20:22:32:ab:4e:91:00:e9:c1:0d:51:
32:24:29:23:5d:1f:e0:e5:ba:7b:a2:9c:c1:e3:0d:b7:7b:7d:
31:19:c4:e9:76:74:8d:14:65:ca:74:4c:ba:f9:18:50:24:52:
a4:93:92:ab:a7:56:2f:a8:14:09:66:92:9f:dd:5e:17:07:ec:
85:96:3e:73:1f:75:35:d7:6a:08:91:7f:08:92:32:d2:47:66:
4b:da:b6:d0:9f:85:70:25:f6:cd:ff:a6:8c:ef:31:c4:a1:cd:
f9:c3:5d:59:aa:4f:37:9f:79:bc:29:66:b4:77:c6:6c:0f:10:
d2:c6:85:d0:64:4f:1c:7f:85:db:4f:cc:fb:ac:24:15:3c:ed:
bf:08:8c:e1:0c:02:1f:19:70:3b:88:6a:27:4f:fe:74:ef:20:
7e:b8:75:4d:0e:6c:61:66:81:48:ff:7c:c5:b2:85:38:db:86:
cf:39:99:80:e5:38:02:31:50:4b:bf:ac:47:af:e1:ef:4d:5b:
d2:d9:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:45 2023 by rpki-client on console-fra.rpki-client.org