Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/003909aa-85df-3513-bdc6-4a3806acec14.roa
File: 003909aa-85df-3513-bdc6-4a3806acec14.roa (raw, json)
Hash identifier: wogLW01q3lnLnwPLEUHnzVNpHFiyTe0SgarGTlq6XtE=
Subject key identifier: 29:38:94:0F:85:CC:16:B5:80:11:93:50:FB:F2:93:ED:93:62:95:82
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AD99C292288DCCB5B9B100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/003909aa-85df-3513-bdc6-4a3806acec14.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.71.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:99:c2:92:28:8d:cc:b5:b9:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=54096f05-6fc0-4ffb-bc93-e083b42c5529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7d:9c:ca:c1:08:a7:1b:1a:c3:2a:1a:d3:59:
ae:e8:0d:b8:fe:b5:8f:a7:e1:e8:d4:15:5d:90:fe:
0f:3a:6c:bb:19:b6:e6:67:37:84:a7:8c:18:e4:25:
25:b8:2d:b4:9a:3e:61:91:f9:d0:19:03:f9:e6:b2:
cf:1d:82:47:79:ab:31:48:7c:c8:a7:81:2d:ae:fd:
be:d3:60:66:66:f9:56:bc:54:50:09:f3:45:6d:bf:
95:3d:70:3d:3f:57:10:3d:fe:b7:ee:0e:3b:32:02:
8f:51:e8:63:66:81:a4:a4:0d:0d:a3:e4:a9:72:ab:
d4:c4:d7:cb:6d:25:2c:10:c6:96:d3:b0:28:4c:a7:
e3:16:1a:81:07:84:7e:b8:42:62:c6:f3:e1:ce:b9:
1a:4b:43:4b:16:ed:01:fb:89:61:80:ff:39:23:2f:
b5:12:b8:b4:23:9c:07:f7:f2:2d:61:53:4b:39:7c:
2f:ed:f5:57:b5:04:d0:29:a7:6f:b4:8c:93:68:08:
63:b1:6e:38:ba:d9:f3:c1:d8:4d:a8:0e:45:7a:27:
a4:39:b9:56:bb:36:e7:a2:f8:6b:c7:6f:cb:bc:3c:
f2:9a:33:9d:c1:b8:89:ac:7c:fa:c5:73:a5:c9:ce:
e4:79:f3:88:3d:3c:ab:dc:b5:34:62:f4:d0:d3:4d:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:38:94:0F:85:CC:16:B5:80:11:93:50:FB:F2:93:ED:93:62:95:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/003909aa-85df-3513-bdc6-4a3806acec14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.71.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:d2:cd:f8:f4:5d:e3:1a:94:a6:1e:27:f6:48:dd:64:bb:5a:
5c:58:64:4d:e7:da:63:55:eb:b5:e2:09:b7:bb:8d:67:b9:c9:
fc:bd:a3:64:2c:8c:4d:2e:be:cf:36:71:53:15:c7:46:3c:09:
63:da:88:42:f1:b0:3d:9b:ac:1d:1c:e5:62:17:74:86:c1:d1:
fa:0e:65:39:05:d8:20:cb:a4:eb:e4:6b:81:7e:89:54:69:4a:
75:2d:50:af:69:16:7a:a6:d4:df:10:f7:9e:b0:bf:d3:2c:71:
46:fb:3c:f9:da:d4:a6:c6:e3:32:15:54:b8:f4:21:e6:c9:94:
27:b5:b8:7c:06:4c:2d:70:51:7e:a8:c6:e1:c5:0b:8d:a5:3f:
3a:04:0b:cc:2d:b8:cc:91:0f:f9:52:5e:7c:b0:e9:11:ff:e3:
34:97:af:f1:ff:fd:9b:d4:d3:04:b7:02:1a:c8:72:be:da:f2:
38:25:5c:ae:d4:df:f7:d1:47:2a:13:84:c1:5f:41:10:dd:47:
a5:71:06:52:71:fe:4f:7d:c2:72:42:a3:d0:3d:5a:16:56:06:
9f:ab:a4:3b:09:6f:68:e8:d4:0a:6f:f8:7d:ad:3d:30:57:ea:
f9:00:94:aa:4a:0d:e6:7c:3f:b6:ae:36:7e:2b:f4:9c:9d:7d:
a3:e0:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:43:24 2025 by rpki-client