Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17f88f86-0caf-3568-b232-50d9cd3e3b49.roa
File: 17f88f86-0caf-3568-b232-50d9cd3e3b49.roa (raw, json)
Hash identifier: zxYERPLoVBHNwiWBSGPo2P4wSIqBn8JbwYr9+DBlFr8=
Subject key identifier: D5:E9:07:06:6F:A3:E8:67:36:6D:FE:79:79:04:57:68:89:42:13:41
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EFC1E099095EFE6A74C500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17f88f86-0caf-3568-b232-50d9cd3e3b49.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.139.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:c1:e0:99:09:5e:fe:6a:74:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=457ff50d-c9f6-4826-963c-4d76b6273bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:82:24:27:be:dc:b3:94:f3:a5:46:1f:13:
a9:38:0a:2c:d4:78:7d:fd:99:74:96:b9:aa:f9:e9:
1d:5d:c5:dd:e4:e1:89:f8:91:88:6d:e9:38:c1:8f:
f8:db:2e:16:a6:b5:97:a1:41:cd:c1:f4:35:b1:d9:
06:b9:12:84:a4:80:aa:ac:04:2d:26:f9:27:28:bb:
23:79:b9:fc:cb:77:cc:f9:4c:7c:79:15:a1:3d:56:
46:de:46:eb:6c:da:f9:fc:a5:5d:4c:dd:d4:db:a0:
32:8f:a5:b4:e4:3a:2b:a3:7f:2a:43:41:4f:19:9a:
ac:e3:c7:96:8b:5e:71:1e:9d:bf:72:45:12:e9:36:
ef:6c:e5:0f:ed:1d:98:e8:e8:45:27:0a:fe:cd:64:
f0:01:30:44:d3:4a:e9:d0:f3:ee:47:aa:94:47:cb:
65:2e:cf:61:d7:d1:93:2b:24:0c:0e:7e:fe:b5:ba:
d2:6e:66:14:90:83:14:2e:36:1b:cb:81:f5:93:0d:
cb:e7:71:ad:b9:10:a8:d7:6c:fe:d2:4b:1c:fb:36:
96:9c:1a:b2:a5:b1:78:67:c5:1e:62:88:39:cf:0a:
3e:f7:30:bc:e4:62:8d:47:ef:fd:d8:2b:df:3f:0d:
a5:fd:c1:cf:71:65:fa:c0:3f:0f:3f:e6:b6:af:d4:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:07:06:6F:A3:E8:67:36:6D:FE:79:79:04:57:68:89:42:13:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17f88f86-0caf-3568-b232-50d9cd3e3b49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.139.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:38:d8:b3:05:0d:c1:de:86:ce:8f:e7:6c:25:ca:c0:b0:18:
35:96:0e:0b:3b:67:0c:49:d3:2c:a3:82:73:05:03:e4:3c:c1:
4d:06:65:81:45:b6:6d:68:fb:37:f1:52:3f:d9:f1:57:0b:b7:
64:60:75:ed:31:ab:c1:70:9b:4a:5b:39:8f:87:4a:65:6c:4f:
b1:97:0f:62:dc:14:f5:26:f3:74:7c:93:ee:2e:3e:4b:28:d5:
cb:a9:18:aa:51:f2:fd:29:05:09:41:e2:07:fa:16:79:4a:25:
b3:8e:59:cc:46:59:3f:48:53:6b:0a:a3:93:96:45:2e:45:7a:
03:c9:76:41:3d:7d:e9:96:87:d4:f4:2e:33:5f:cc:e2:c6:c4:
d2:d5:ac:e5:f5:77:f8:da:00:b5:cf:2d:aa:1e:90:55:fc:7e:
63:34:e5:01:84:49:f2:af:0b:42:25:41:7a:82:67:43:d1:22:
75:3c:d8:57:66:9a:47:0b:ab:8e:83:3d:54:be:b6:37:f6:80:
be:73:32:a5:3d:9e:cc:ca:db:81:7e:b2:fd:7c:aa:d5:6c:29:
d8:0f:a5:2e:91:e5:8f:0d:7f:48:01:d9:2f:3e:a2:84:d9:32:
55:a5:44:16:64:cb:44:f4:a3:1c:a9:d6:df:74:8f:0f:e1:de:
89:68:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:58:59 2025 by rpki-client