Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00988869-21a0-3fd9-af70-14e407750737.roa
File: 00988869-21a0-3fd9-af70-14e407750737.roa (raw, json)
Hash identifier: TJrHPIebFoSLWa0iZ9iEB59KAGQXKyGYWN1TicI6PvA=
Subject key identifier: 07:35:8C:5A:7C:6D:A8:71:57:31:45:42:6A:58:ED:67:AF:07:63:AD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6E8A117CD5984FD20C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00988869-21a0-3fd9-af70-14e407750737.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 19527
IP address blocks: 34.127.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6e:8a:11:7c:d5:98:4f:d2:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=076b37ae-03b7-470e-be70-3ee9ea8f296e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:6e:16:6b:cb:f6:a1:7e:6c:20:0a:b8:34:
36:e1:2f:43:95:f0:bb:ba:b6:52:23:de:45:f4:9a:
30:ab:16:44:46:2b:20:04:c1:69:12:73:28:4c:06:
b7:9e:13:67:9d:4e:21:cb:18:ec:b0:39:a6:ad:21:
d6:5b:a4:01:6c:f1:33:86:2b:c3:ea:8f:86:73:5b:
bf:73:c9:7f:98:b9:de:47:09:be:b5:c4:d4:6d:c6:
d3:41:16:17:75:18:dd:6f:0e:49:ec:35:95:29:05:
d0:cc:53:5e:af:f0:cf:f8:dc:16:d9:90:4c:5b:9c:
dd:7f:31:2a:37:b9:f0:67:d1:40:47:68:d3:7c:28:
c8:8c:cd:8f:71:d2:ce:ab:59:9e:47:e6:ac:52:1e:
8c:11:28:23:b2:3d:a5:d1:21:34:d8:4c:9f:0a:62:
97:67:6e:27:9c:a6:cb:5d:38:ad:59:be:25:3a:fa:
11:1f:ec:3d:62:7e:82:76:a8:74:fc:7e:42:10:b4:
2f:2b:0a:8c:49:5b:eb:e1:22:65:cf:d6:29:51:2e:
8a:a4:c1:dd:a5:30:7a:e5:23:dd:d9:d9:41:40:b6:
0a:84:eb:33:71:4f:d5:f0:b3:38:55:a3:f4:9e:1d:
ed:b9:bb:07:45:f6:26:97:53:46:d1:17:21:ea:24:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:35:8C:5A:7C:6D:A8:71:57:31:45:42:6A:58:ED:67:AF:07:63:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00988869-21a0-3fd9-af70-14e407750737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.127.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:60:9b:e8:49:15:6f:65:03:6e:a5:5a:69:a3:e7:dc:48:7d:
b2:47:93:38:82:80:81:b4:16:60:aa:fa:36:a1:5b:40:09:8f:
a2:e3:6a:9d:62:98:e2:71:7b:21:01:d2:97:7b:c7:e7:bc:ec:
28:a9:b4:a7:c3:ce:63:d6:06:42:e2:60:c3:be:e0:13:17:27:
3c:ad:89:f2:8e:c8:c5:57:36:78:1c:9b:69:84:ea:05:f0:ea:
d2:49:76:94:a2:b5:de:04:7f:b0:81:8d:ef:69:d6:78:1a:d3:
fa:72:bc:ad:08:8e:c8:54:18:1c:fc:51:b1:21:7b:c6:88:b2:
7a:b6:92:66:34:92:e8:2c:16:b1:f3:0b:e2:f0:5d:95:21:0c:
80:86:ea:04:bd:db:12:c8:a3:0c:04:c7:e8:38:c1:13:58:05:
0d:0a:8d:9b:8d:10:a2:49:bb:7b:ef:12:8a:75:19:ae:b5:21:
98:cb:e5:07:9b:69:86:56:18:3f:a9:4a:00:f0:19:5d:e5:f2:
c1:14:2d:31:0b:c3:26:9b:19:e1:85:81:01:2f:c2:3e:37:db:
cf:66:9c:f6:11:89:cc:c3:14:8d:e1:7c:3d:48:66:72:70:f9:
d0:b2:01:a3:76:0c:38:b3:90:96:35:b1:ac:22:c8:56:50:a8:
cc:6b:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:31 2025 by rpki-client