Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03128f9c-8908-3289-b2bb-e9812768fcb7.roa
File: 03128f9c-8908-3289-b2bb-e9812768fcb7.roa (raw, json)
Hash identifier: 141cnb966Szny4jPVYl/AYnmsVbghswjJLAebEpg+JE=
Subject key identifier: A1:17:D7:A7:EB:BC:CE:EF:68:64:97:96:60:20:0E:85:C0:17:B3:45
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BF14233029E1A2526B097E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03128f9c-8908-3289-b2bb-e9812768fcb7.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Thu 12 Dec 2024 05:00:00 +0000
asID: 19527
IP address blocks: 34.0.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bf:14:23:30:29:e1:a2:52:6b:09:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Dec 12 05:00:00 2024 GMT
Subject: CN=6112a61f-07e4-4733-8223-7085e55f5f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:9d:9c:61:ec:4a:57:7e:c6:33:90:e5:de:
ce:b5:ba:2d:f2:ec:de:86:b6:3b:43:29:b3:8b:82:
b9:d8:53:5d:e6:46:c9:0e:79:86:cd:35:1d:f2:ab:
03:11:63:fd:96:de:bd:00:8c:f7:11:fb:c1:7e:2b:
64:d9:ed:29:ad:73:39:68:9d:48:11:1e:e1:f2:36:
22:64:30:a0:60:f6:eb:29:af:0e:09:b8:e7:ff:06:
da:47:f0:73:3a:63:dc:b0:1f:8d:ed:b0:83:42:1d:
e0:3a:cd:b2:b7:c3:34:4d:64:05:7c:1c:b5:5d:c8:
77:38:7f:0b:3a:1a:a7:ee:f2:64:d8:46:26:17:8f:
4a:39:01:89:5d:92:b3:b2:e3:79:d6:3f:98:85:e8:
e5:2a:af:1a:c4:eb:a8:68:f8:fe:0d:9c:f5:05:c1:
65:22:89:f4:78:3b:f3:02:6e:05:c3:e0:62:e8:af:
95:a1:0b:47:1b:91:0d:30:5b:72:3a:ab:e6:86:0c:
de:e4:79:cd:c5:29:6a:07:7b:4d:ce:7f:14:d6:e8:
ab:03:b5:6f:23:4c:26:0a:22:3b:99:ef:a9:ac:93:
f4:0a:96:1e:d1:87:2b:f5:8e:97:d8:c0:c3:0e:f3:
8a:f0:4c:e9:ae:62:89:e3:6b:f6:b3:89:b4:8f:76:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:D7:A7:EB:BC:CE:EF:68:64:97:96:60:20:0E:85:C0:17:B3:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03128f9c-8908-3289-b2bb-e9812768fcb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:bd:cf:d6:fa:51:8c:74:78:c2:b1:89:49:88:9b:79:b3:77:
8e:53:16:d1:fe:1b:19:a0:6f:8f:ae:a7:ee:e9:e5:33:6e:6b:
82:26:06:7f:7c:29:97:76:43:05:f5:fc:48:03:4c:f0:51:5c:
a3:53:a0:bd:e2:9e:11:80:15:53:42:19:c3:56:9e:0a:5b:c9:
ee:95:70:99:c9:6a:3e:be:d5:69:26:3c:8b:83:aa:40:5d:5c:
fe:11:45:58:98:98:a3:9e:36:0f:ba:1b:2d:dc:7c:11:2b:14:
27:6c:80:b8:d2:6b:75:1c:91:f2:f0:d5:55:a4:51:60:cd:30:
2b:90:e2:da:e3:3a:17:2f:db:71:a8:08:16:c1:8a:24:df:3b:
f7:e3:c8:2d:79:be:d5:da:0c:f7:6a:5b:09:44:c4:1e:73:1c:
cd:27:8a:30:34:86:62:31:13:1a:21:dd:9f:d5:4e:3b:9a:53:
c2:c5:bb:62:3d:a5:f0:65:4d:a7:6f:7c:c0:f4:cc:9f:96:80:
38:f6:92:ba:42:86:c4:a9:a4:c1:39:e5:a2:c2:f7:b7:b3:59:
77:51:17:cb:b2:b6:5b:c7:2f:c9:bf:bc:91:76:a3:be:27:2b:
08:d9:98:5a:53:e8:75:86:09:97:a4:89:97:3b:ab:be:72:bc:
a2:42:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:35:39 2025 by rpki-client