Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3de95c7-d039-31bd-8da1-4f9669ec813e.roa
File: f3de95c7-d039-31bd-8da1-4f9669ec813e.roa (raw, json)
Hash identifier: UZvcMAxssC7CfIWiULcsADKqC3akdjDJCFlA4Lo+D5Q=
Subject key identifier: 9B:1C:A7:10:6B:62:92:A5:BD:2A:FC:0C:E9:9E:50:5D:17:A5:75:94
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7496512BF2578F526900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3de95c7-d039-31bd-8da1-4f9669ec813e.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.221.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:74:96:51:2b:f2:57:8f:52:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=3f0843d0-ee3c-4003-ad37-f0f2737c8f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:85:b9:0b:3f:0a:d1:13:0b:db:c3:71:f3:
89:b8:c0:f8:92:22:69:ae:a1:bb:12:3e:58:a2:59:
3f:d5:17:a7:b0:a9:72:cd:1d:80:ec:a8:b2:b1:29:
69:7a:93:af:27:a1:14:8a:e5:e9:d3:a2:a2:da:e7:
51:0c:ac:3a:d4:9c:f1:b5:c9:f6:80:42:0e:95:01:
8a:71:d4:76:e4:49:28:4e:a6:98:39:79:c9:7e:62:
0e:6f:7e:20:37:ce:57:66:eb:ea:f1:b0:ef:2e:3d:
57:46:04:e5:d7:b9:ed:41:33:58:84:ea:3a:21:42:
18:54:99:32:8e:1e:90:7c:5a:78:f2:31:47:f5:82:
9e:be:b7:31:24:56:83:1f:3e:90:a5:07:6b:1b:76:
d6:3f:4d:15:b2:6b:60:be:41:d1:d1:00:cb:3a:43:
a6:19:32:11:de:04:7d:a3:25:b8:91:10:14:d3:88:
e3:80:88:5e:78:69:7e:83:64:d5:d6:23:fc:db:87:
3d:6f:5d:a8:94:70:4a:2c:a9:f8:b0:10:c1:c6:16:
75:c0:cd:a7:b9:7c:8d:ab:f3:91:6f:2b:a2:1b:69:
d2:6b:ee:0b:b4:81:ed:e3:9c:b6:24:e0:57:6d:16:
b1:53:27:f7:91:bb:18:24:fa:fd:b3:05:03:f8:e9:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1C:A7:10:6B:62:92:A5:BD:2A:FC:0C:E9:9E:50:5D:17:A5:75:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3de95c7-d039-31bd-8da1-4f9669ec813e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.221.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:5f:85:7c:e6:d8:eb:01:3e:44:11:81:87:90:c5:e3:c6:89:
50:40:d9:00:09:ad:e7:20:92:8c:61:aa:03:18:89:a2:fd:ae:
ac:d1:c3:6e:42:ad:c8:8a:ee:ac:9c:c5:b0:ba:c9:03:92:3e:
86:ad:c2:6e:06:b5:2f:a6:d0:05:24:19:97:f3:36:95:0b:ba:
30:b3:f9:c1:30:9c:1e:1b:c6:d0:30:83:2e:83:5b:01:bc:3b:
37:7b:37:6a:14:a1:5b:82:8d:16:ad:a0:26:12:d6:41:94:bc:
c1:15:5a:ff:07:8e:78:91:dc:e4:a8:14:8c:0c:5d:a1:09:ec:
59:ca:20:45:8c:ea:cb:be:71:ca:cb:fd:33:89:15:93:24:f0:
6f:b5:f7:73:ab:67:9d:67:1f:84:87:47:76:5c:4c:a9:bd:e4:
20:4a:1a:fc:cc:30:ae:15:6b:cf:6e:3c:e0:d4:5c:94:1d:28:
99:4d:ed:f2:8d:7a:b9:7f:96:8f:a8:a2:cb:7d:9a:bd:2d:ff:
9d:34:49:75:43:9e:29:eb:33:43:27:b4:e1:0b:0b:6d:59:75:
b2:66:64:0b:1e:86:93:37:99:02:7c:82:29:f3:07:dc:4a:8e:
e5:a1:56:7a:78:c3:01:49:6a:b3:96:c3:c8:22:2b:1d:7d:e5:
88:50:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:16:50 2025 by rpki-client