Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10fda08e-8e27-3978-a41a-9f6efc8155c7.roa
File: 10fda08e-8e27-3978-a41a-9f6efc8155c7.roa (raw, json)
Hash identifier: zCYGKIF+AzbGYUHe6n6J0jiV8hn/DAGgw2HvNM3aBww=
Subject key identifier: 90:2F:A1:B3:48:7D:89:B5:C8:11:60:D9:49:42:4F:A0:5D:79:27:0D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A03492B6780725722B44BA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10fda08e-8e27-3978-a41a-9f6efc8155c7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.144.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:49:2b:67:80:72:57:22:b4:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=dc6c518c-447c-4ae0-9b2e-f8ef7403d0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d1:9c:0d:b1:df:9e:51:1b:7e:3c:24:cc:7f:
87:cc:7e:75:d0:0d:df:f5:53:7f:44:65:0e:2c:3a:
08:58:b1:b7:19:75:ac:f2:50:41:48:1b:d4:de:a7:
03:57:49:19:73:fd:11:c2:b8:8e:7c:ad:cf:2e:18:
a4:0c:64:eb:9b:e6:71:2b:41:70:6f:f5:1f:b4:eb:
9b:75:df:89:c3:50:d2:2b:4a:5e:96:17:96:e1:2e:
3f:a0:09:a9:62:49:f4:c0:2b:9b:60:e4:a9:6e:dd:
66:13:ff:98:9e:64:03:29:c6:83:c7:ca:07:45:ef:
bd:9a:8c:fd:ef:32:73:a9:b6:72:63:4d:c4:42:c9:
cb:01:eb:78:22:fb:51:bc:18:89:29:4b:fc:a0:03:
d9:bf:17:d5:4b:86:73:9f:d9:cd:be:db:09:aa:87:
ae:19:e3:57:72:af:eb:bf:eb:b8:a0:41:90:91:77:
5e:e5:34:11:cf:93:bc:aa:74:f7:ad:dd:dc:d7:2b:
7a:5e:bd:be:70:43:74:44:0a:4f:9f:92:2d:3c:b8:
16:3a:fd:0b:3c:2f:89:70:1e:3d:cf:17:d1:be:d0:
d3:eb:4f:fb:91:84:27:f5:1a:0d:a6:73:d6:c6:1c:
25:76:f5:ba:56:12:be:a0:2d:34:ca:bf:63:bc:c9:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:A1:B3:48:7D:89:B5:C8:11:60:D9:49:42:4F:A0:5D:79:27:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10fda08e-8e27-3978-a41a-9f6efc8155c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.144.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:9d:18:8e:fe:65:d3:db:82:f5:f3:ce:82:1e:03:84:94:33:
9d:6a:83:36:9f:a7:2c:8d:58:5a:39:e7:6b:20:5b:24:84:fc:
89:d1:24:79:3b:67:32:52:38:4b:ef:bf:33:9e:6e:aa:fc:b0:
1c:6c:ae:18:c7:df:c4:26:0c:38:0a:8f:9c:63:5e:bb:10:a2:
68:5f:e4:62:8d:96:5f:13:2d:aa:70:cf:50:ca:05:7d:ee:94:
44:e0:89:a0:d2:99:71:0e:0b:f8:ef:db:3e:3e:a5:a5:ff:74:
bd:97:38:79:8f:d2:6b:8b:31:c9:e1:10:74:43:cb:60:3d:60:
c2:28:90:bc:95:49:56:d5:2f:45:30:4d:16:5b:df:65:fb:ce:
84:61:7b:0b:e9:7a:a9:7a:98:24:1e:55:9b:f5:d2:9b:b4:68:
b7:8a:b5:49:ea:54:90:15:8f:08:fd:22:c2:40:7c:34:fb:af:
67:2b:b2:8b:47:84:4b:c6:88:6c:04:45:1f:58:0f:1b:5a:52:
ff:41:8d:66:dd:dd:e3:c6:74:af:f7:01:5b:49:83:8c:18:f9:
c0:be:78:5b:a7:f4:8f:5f:9e:b7:b1:20:c4:cc:04:56:ad:50:
6b:c1:c5:6b:8c:e4:10:9d:a4:bb:ee:e6:70:ee:68:09:c0:a2:
0b:78:98:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:54:56 2025 by rpki-client