Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14173dd6-2402-3e48-8476-98ccacb25b8d.roa
File: 14173dd6-2402-3e48-8476-98ccacb25b8d.roa (raw, json)
Hash identifier: R0PnhZ82ItmN0Awrmlh/zqZkVyj93cUK1N0iKnA4EGM=
Subject key identifier: 8F:00:C6:19:23:44:2F:28:A8:50:31:FB:48:77:CA:2F:C9:E3:71:4A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FC1560C776E854822B3A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14173dd6-2402-3e48-8476-98ccacb25b8d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.133.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fc:15:60:c7:76:e8:54:82:2b:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7dbd9573-9b0c-402f-a7dd-c039f37aa18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:37:e5:d1:7b:a0:b0:ce:c2:28:79:97:ee:
5e:18:fc:98:1b:9c:78:e2:cd:d4:3c:28:fc:4f:16:
35:49:ae:f6:be:11:8a:e2:31:93:29:b4:6d:ed:67:
1c:b2:5f:20:b1:05:3b:4e:0b:a4:95:04:00:8e:a8:
8b:fe:7d:cf:6b:04:67:b9:c9:d9:16:6f:b9:a3:9b:
55:74:17:74:11:a5:e2:5c:3c:91:05:3c:21:18:4d:
bf:79:1f:bb:7d:ad:4c:69:58:fd:c3:a5:df:85:a2:
2f:60:ed:87:9a:6e:df:f5:23:da:3a:0e:50:b4:71:
af:cf:ed:23:e8:03:24:eb:d1:63:0d:7d:22:e9:fd:
1c:4c:8e:04:76:dc:19:ab:5b:c4:5d:9c:30:b1:90:
13:94:ef:c0:4f:ba:26:94:7a:8a:6f:22:8e:96:26:
7a:98:e8:d1:11:d6:ec:71:30:0e:ae:bf:e0:c3:34:
76:c4:23:8b:0b:1a:ae:3d:39:10:5f:f1:1e:c3:e5:
81:ef:db:0d:86:81:a6:db:fa:db:d1:9c:ac:d4:fc:
fc:59:06:61:f0:20:1a:8b:7e:bb:44:a4:cc:43:f8:
db:a7:f7:14:50:21:1c:4d:14:8f:e9:bd:c8:55:aa:
c7:b0:88:1f:f1:28:89:46:31:58:c1:5e:79:1e:b4:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:C6:19:23:44:2F:28:A8:50:31:FB:48:77:CA:2F:C9:E3:71:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14173dd6-2402-3e48-8476-98ccacb25b8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.133.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:e1:1f:21:01:b3:6d:93:f7:45:c3:a4:00:af:26:19:9b:27:
9a:ff:35:fb:16:11:20:6e:f8:c1:d0:65:e7:13:b6:e4:88:d9:
64:79:10:2d:e6:20:0e:d2:33:e0:d4:0a:73:3d:22:19:f4:9f:
df:1b:b1:46:8d:78:b9:e1:0d:21:e0:e8:98:c9:ab:8b:2d:1e:
cc:b0:ad:20:04:ac:32:73:59:d2:ed:db:17:a2:d1:0a:7b:26:
48:1d:15:3e:36:33:0b:52:40:18:f5:d1:15:b3:a8:e9:a4:6c:
35:7e:8c:bf:c2:da:de:f3:8c:95:b5:eb:95:23:bd:24:fb:c8:
e6:cb:ed:e2:5f:27:c6:e2:6a:75:f7:6a:2f:36:90:82:01:2a:
bf:f6:5f:cf:a1:ca:25:41:8c:28:ee:8f:3f:a1:b0:76:14:88:
45:79:4f:0e:37:a9:19:14:c0:d4:80:95:a8:bc:59:c5:40:ed:
79:5b:85:c6:bd:e6:99:27:00:3a:a9:d4:45:f4:4b:fd:c4:e2:
05:7a:82:8f:18:29:f6:70:d8:86:7a:5c:a1:87:68:41:00:c7:
b1:57:df:56:72:ab:48:44:34:3b:48:26:e4:12:50:a0:d0:e8:
d3:24:40:e0:f8:5b:82:fc:02:05:8f:86:fe:73:ed:46:3e:62:
3d:60:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:02:45 2025 by rpki-client