Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff581827-6dd3-3243-a075-7e3bac7f9d3a.roa
File: ff581827-6dd3-3243-a075-7e3bac7f9d3a.roa (raw, json)
Hash identifier: TZLDEOkT0PllGersJFUx9D/HpBVrWGbEeETcl3U/ut4=
Subject key identifier: 33:90:B8:CF:DA:C5:2A:98:9B:42:7D:95:41:60:D2:F1:9B:52:BD:E1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AF73EEE8653900C8885A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff581827-6dd3-3243-a075-7e3bac7f9d3a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.186.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:af:73:ee:e8:65:39:00:c8:88:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e38368dc-64a6-4f90-b8ba-acef29e67100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:cb:58:20:3e:13:61:2c:f0:9d:c3:b5:99:
c2:4b:53:5b:87:64:18:37:b7:23:87:b4:76:38:c8:
0e:40:ec:6b:7e:87:02:5a:f5:03:6d:08:85:7f:f0:
42:4e:4f:11:db:f9:fc:23:59:7e:ee:a0:33:0c:81:
9b:ed:b2:33:b6:78:08:ba:91:da:1a:05:ef:5f:d8:
5f:d1:eb:38:d1:17:7b:00:4a:74:de:42:e6:b1:4b:
a8:fe:13:24:0e:1b:5a:43:2c:59:ea:ff:6a:61:93:
0b:8e:6f:e7:ab:22:b1:35:b7:44:c1:51:fd:33:ce:
60:e5:6e:7c:3f:38:9f:20:11:44:1d:5f:93:21:f4:
1d:ff:f7:b9:34:36:9b:46:a5:b4:53:57:4f:2e:47:
da:06:61:9d:9a:2f:66:7f:52:e2:3b:49:b6:49:19:
77:ea:b0:8b:29:ea:0e:1f:1e:90:cb:91:52:67:1c:
bc:11:6d:34:53:51:32:8f:8c:c7:c2:e3:1b:42:88:
bb:8b:ba:80:ba:4a:79:26:a9:09:3c:0c:18:78:c7:
d7:68:e9:f4:5c:1a:96:a2:bf:ef:74:9b:a8:33:6c:
c9:23:73:8b:ef:78:0b:25:76:d6:20:6a:fe:27:6c:
e9:3e:9b:6b:69:1e:1a:15:95:c3:df:d4:1e:44:28:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:90:B8:CF:DA:C5:2A:98:9B:42:7D:95:41:60:D2:F1:9B:52:BD:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff581827-6dd3-3243-a075-7e3bac7f9d3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.186.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:f2:03:8c:c8:41:ad:f4:aa:32:64:6f:c0:73:b9:a0:03:fb:
61:ab:14:be:3f:ac:c9:3e:b4:6e:cc:b4:43:ef:a6:bf:51:93:
4f:d5:c7:25:04:83:d5:57:f1:17:b6:20:77:2d:e2:02:37:86:
09:86:42:29:43:04:85:ed:04:32:85:cf:2a:69:3c:aa:39:92:
c6:06:26:c6:89:5e:bf:70:ad:80:a4:1e:50:81:a6:df:a4:86:
f6:8a:72:a4:22:e9:77:9e:38:66:a4:1a:2e:e7:45:a5:a2:80:
7c:e2:95:b4:43:fd:fc:36:78:3c:4e:f0:2f:d9:22:5b:14:a3:
95:0e:9c:cc:c3:9f:15:8d:3c:58:07:76:43:0c:28:ca:6d:f7:
ff:8e:ee:1b:db:3b:91:8d:cc:ff:0e:f4:d0:ef:8c:34:f1:21:
f9:03:79:eb:9a:13:d7:d3:47:69:16:80:33:3a:9c:33:16:40:
ae:34:1a:f4:37:cc:72:ce:19:c7:ec:99:19:0c:06:66:41:27:
74:ad:40:ca:59:9f:6e:21:73:ed:32:58:b1:3e:57:8a:bd:83:
73:bf:6b:9e:9f:51:dd:a2:d0:ac:60:dd:96:b1:e3:15:4c:f0:
57:01:ff:c3:51:a3:19:ff:16:10:78:60:b6:91:fb:4f:48:83:
f3:50:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org