Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18866ccf-1804-3ad3-a415-89098f96a33f.roa
File: 18866ccf-1804-3ad3-a415-89098f96a33f.roa (raw, json)
Hash identifier: FJ76+Ospjkh1UwDnYPK0pA0kQ0xBvXsmtd6mr0GKsSo=
Subject key identifier: EE:84:D0:F5:D5:F8:DB:BA:89:82:CD:0B:FB:E8:0F:EF:5D:C1:07:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A03ACE7DB1A501A966C9B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18866ccf-1804-3ad3-a415-89098f96a33f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.76.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:ac:e7:db:1a:50:1a:96:6c:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b3a1dbf0-d8be-4801-b9df-7c7d9c17f5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:78:79:bd:a3:24:36:03:62:73:7d:1e:b1:
8d:65:65:17:6b:08:22:fe:f4:be:1a:1a:6e:78:c2:
ca:78:e9:c1:b0:cd:0a:a1:53:d0:70:25:73:67:32:
44:39:fa:0d:ec:21:4d:be:16:2a:a0:de:a3:e4:9d:
6b:f6:4f:f7:6f:23:49:35:63:a6:95:54:bd:b9:d0:
7d:d7:b9:d4:89:9b:4d:36:34:5f:fc:ac:cc:84:99:
56:fc:60:71:85:26:6d:78:df:3c:98:c9:ec:46:27:
94:ab:5d:03:29:a9:b6:74:e7:cd:fa:ce:c6:2d:16:
28:91:b4:97:f6:e6:d8:bc:cc:7b:69:55:f2:35:87:
42:f7:b6:23:5d:56:d4:9c:54:56:ed:d8:50:e9:af:
56:7a:36:10:da:0a:42:7f:d6:c5:68:f4:63:21:d4:
17:82:e6:9e:11:e0:dd:ce:79:a1:c1:71:c5:da:ac:
e6:ee:e7:3b:df:0a:77:b6:b4:a9:65:9c:f7:ab:31:
bb:ee:af:12:53:19:2f:4f:80:bb:64:49:05:bb:fe:
6b:0c:f0:df:ed:5a:d8:e8:d7:c3:b3:77:84:98:0c:
0a:b9:60:ff:19:50:07:c6:88:2e:90:18:52:ae:a3:
9a:d5:b5:91:7f:79:d8:3c:be:e3:6b:bb:93:9b:c8:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:84:D0:F5:D5:F8:DB:BA:89:82:CD:0B:FB:E8:0F:EF:5D:C1:07:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18866ccf-1804-3ad3-a415-89098f96a33f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.76.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:27:8f:39:05:0d:c7:46:01:ca:59:1d:ed:97:7e:7b:7c:b3:
79:f0:a2:52:bf:af:23:19:34:73:4b:b1:fd:c1:e7:24:5a:0d:
f7:44:30:47:c5:75:a2:84:27:c8:41:3c:25:3d:0d:2a:ab:1f:
9f:5b:98:20:4f:28:63:59:fb:6a:c0:89:34:0c:96:8d:f3:9a:
5e:45:35:13:7d:06:13:d0:b5:74:5f:79:45:f2:30:da:f5:67:
01:ba:d9:63:4c:23:b1:b3:a3:33:59:7f:25:ff:25:3c:e5:68:
f4:60:14:ce:96:7d:83:b1:7e:f2:51:f3:56:68:e6:da:f8:44:
5a:6e:9b:64:38:80:18:8e:7d:9d:c2:36:30:a3:ad:c1:c5:31:
a2:30:c6:aa:e4:80:b0:4b:64:cc:40:b4:cb:65:92:17:6e:e4:
2a:99:d3:71:fd:75:93:90:84:e3:9b:ba:f4:63:8f:fa:6f:bc:
8f:b1:2c:99:8e:95:3a:18:a8:04:45:45:cb:dc:9c:86:db:7f:
da:48:b6:95:7d:29:db:a7:6e:ca:c3:9b:3a:b9:3c:0d:07:b7:
54:63:bb:bf:15:2a:a0:20:36:c0:5d:ca:bd:f1:ba:34:f8:6f:
4c:e3:a0:3b:61:29:0d:6c:37:8f:15:0e:c8:05:f2:6c:aa:dc:
04:a5:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:14:32 2025 by rpki-client