Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0786cc36-387d-3909-adf1-111b32881a6d.roa
File: 0786cc36-387d-3909-adf1-111b32881a6d.roa (raw, json)
Hash identifier: 0+yNr/7MwLGYB4KVkwd3zDSQMmvwu4Nbj1wNWrJJqxE=
Subject key identifier: 55:9A:09:43:B4:0E:35:E2:6D:A1:EA:DE:3E:96:0A:19:5F:F4:77:06
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EE243A12719CEDE2698F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0786cc36-387d-3909-adf1-111b32881a6d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.146.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:24:3a:12:71:9c:ed:e2:69:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=97b074bb-b5e9-4d9b-bf2b-848e7c060d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:4b:37:eb:c5:02:aa:25:94:37:78:95:05:
61:cf:b3:04:68:98:fa:3d:ad:9d:5f:72:4d:b2:b2:
bc:75:5f:eb:81:6e:6a:df:74:63:0f:91:1f:f2:5f:
b5:09:50:0f:1b:e9:8f:5c:1a:89:69:e3:58:1b:16:
73:3a:76:4f:66:80:d2:2e:55:d6:58:54:d7:40:c6:
35:41:a1:94:7b:a0:37:3c:70:22:2a:cf:5f:53:a5:
2b:56:c0:28:3d:36:34:0e:63:57:12:24:cd:aa:b7:
f1:7d:dd:88:93:40:07:00:d5:f7:78:e3:87:38:27:
8a:6e:10:7d:2f:6b:61:83:68:1e:39:05:b5:59:3f:
4a:70:c2:2e:5f:e2:af:38:af:e5:79:25:71:3e:83:
35:03:cd:66:dd:d1:63:c5:22:bd:f2:46:93:32:21:
1e:31:e0:a4:f2:5a:77:80:ba:6a:56:b6:04:ab:14:
30:9d:a7:58:dc:bb:ee:37:11:ec:8f:0e:c7:d5:25:
05:23:0e:53:56:8a:bb:c6:4e:a6:e4:b5:96:79:ea:
53:aa:32:b0:1d:1a:fb:0c:88:28:7e:a1:c1:50:ae:
81:65:26:b2:e8:cc:6b:9d:55:c4:74:4a:17:e3:8c:
a7:da:1c:67:0d:37:b4:53:7d:57:66:dd:14:aa:f2:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:09:43:B4:0E:35:E2:6D:A1:EA:DE:3E:96:0A:19:5F:F4:77:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0786cc36-387d-3909-adf1-111b32881a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.146.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:13:7e:0f:ab:cc:f3:01:25:22:f0:b5:25:85:db:a6:80:8a:
5a:cf:c4:ee:ec:d4:03:c8:46:77:db:ce:77:b6:fc:7f:92:94:
cc:ed:d1:01:10:3c:3d:f4:78:85:0a:b9:5d:05:60:bf:57:fd:
5a:6f:c5:3a:29:26:ed:9e:35:60:6e:b1:81:43:82:45:7b:81:
40:da:3f:a5:45:30:1a:4a:ce:9b:32:6f:94:ea:c9:51:a9:4d:
84:59:34:24:20:97:4d:41:4f:14:21:ba:8e:25:8a:17:0f:94:
12:2b:bb:73:92:e5:67:56:91:57:e5:24:f2:0d:4f:d2:8c:12:
cc:c3:08:d3:05:63:f0:0f:b5:37:f2:a7:f5:f0:d6:1f:81:39:
e7:4e:9b:a0:de:ff:4c:eb:bb:a0:c5:a4:af:64:f4:d7:fe:15:
ef:71:41:ad:88:88:34:88:ca:90:52:4a:89:5d:f2:c1:16:ee:
8a:a5:07:2e:3a:88:a2:6c:a4:a2:cd:32:cb:2a:38:b7:91:7b:
b6:6b:1d:23:35:68:a3:63:46:90:47:64:21:3c:19:f4:21:88:
d5:06:25:02:8e:b1:80:a2:97:4b:d0:dc:a6:99:ed:04:9d:90:
fb:44:a7:dc:af:90:3d:ca:3e:c3:ef:67:f9:6c:e5:2c:f2:4f:
9d:cc:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:47:25 2025 by rpki-client