Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d44574f4-e146-3cc6-9e5b-d7f9c2434c5c.roa
File: d44574f4-e146-3cc6-9e5b-d7f9c2434c5c.roa (raw, json)
Hash identifier: CBT2/YbmfpBNoVEWxXytIqYibPdakm4F8zNTDBF4Y9s=
Subject key identifier: C8:F2:1F:9F:BA:B1:50:79:BA:E1:11:2B:F9:D2:D8:A1:95:A8:67:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A72AB2F77D0D9BC932300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d44574f4-e146-3cc6-9e5b-d7f9c2434c5c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.246.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:72:ab:2f:77:d0:d9:bc:93:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=556d0fea-7a6e-4ca9-81eb-3278da997874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:57:61:a3:73:ff:43:f4:71:b9:24:c4:0f:
81:35:28:2d:8e:5e:ec:50:db:72:e5:87:b4:68:d4:
f8:a6:97:62:7e:a8:73:4f:8b:80:25:94:a6:60:6c:
b9:42:e3:39:ec:1c:49:4c:d2:42:f2:5f:f8:15:aa:
ea:d5:f1:4d:5f:16:f4:87:4d:cb:ec:a7:1f:1d:ed:
4d:94:3f:90:7e:e2:c5:35:2d:2a:c4:dd:12:6c:6d:
79:12:7d:08:22:fb:8f:af:4c:d6:5b:d0:8c:d3:c2:
9f:fd:6a:df:fc:59:bc:9d:ff:bb:e1:d6:84:2a:d9:
d4:79:b3:63:23:64:56:4b:29:74:25:21:41:46:c2:
48:1b:c0:3d:12:07:ce:5c:b0:ac:7a:35:03:4d:c5:
83:b2:3b:c8:74:6e:7d:20:9f:0e:5d:39:72:f0:4a:
71:81:d0:0a:99:e6:af:d6:4d:55:38:2a:ff:47:f0:
cc:a5:74:9f:1b:73:38:69:f7:3d:c2:4b:f4:69:a9:
d5:ff:bc:31:dd:08:21:31:f0:ef:d1:2b:9a:11:b6:
80:fd:ea:b0:a7:0c:cd:88:ed:1e:11:ce:56:e7:82:
a0:6e:ea:f5:86:24:ba:d5:98:65:12:bf:aa:67:4f:
7d:47:89:81:9b:23:dc:78:72:03:ab:64:ad:34:a2:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:1F:9F:BA:B1:50:79:BA:E1:11:2B:F9:D2:D8:A1:95:A8:67:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d44574f4-e146-3cc6-9e5b-d7f9c2434c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.246.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:46:90:7e:c4:2a:85:c6:39:38:a6:90:ee:47:bb:e2:b3:da:
0b:81:61:4d:58:e3:77:a8:dd:47:e3:f2:43:bb:8d:f4:ef:74:
c5:3a:4c:0c:5c:1e:70:91:f1:9f:f7:42:11:e1:e1:12:81:ba:
a3:64:bc:e3:86:a9:68:ae:c8:05:7c:cb:02:83:7d:46:32:4b:
62:cd:ad:e5:37:ec:2e:3a:b6:4a:85:47:2e:7d:37:17:1f:8e:
43:6b:74:b7:83:ed:51:24:69:e2:fa:d5:e9:56:8c:7e:f9:fd:
4c:b9:0c:55:61:68:9d:52:63:5a:6b:33:da:5d:1a:6d:dc:d9:
a7:4e:6d:8f:72:d2:52:8a:b7:70:6f:00:24:02:0c:6a:af:3d:
4f:0f:72:85:98:54:66:43:de:dd:a3:b2:86:bb:d1:86:ba:48:
f2:dc:1b:bb:7a:c6:e2:85:bb:20:3a:e7:0c:d8:c3:87:24:03:
3a:25:1e:dd:e5:c5:4f:92:39:51:11:d9:66:3d:97:c7:fc:a9:
ba:86:ca:2a:70:d6:6c:33:fa:7b:e2:fe:86:4d:19:c2:bf:a1:
ee:e2:00:f2:94:fd:37:10:4e:e4:de:61:73:fe:cb:d8:fb:6d:
80:ad:c6:1c:52:6f:ed:f7:3f:d0:b7:26:52:50:eb:fb:a1:85:
00:df:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:09 2025 by rpki-client