Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1dfb39a2-7b4a-39f0-9349-a91e235b912b.roa
File: 1dfb39a2-7b4a-39f0-9349-a91e235b912b.roa (raw, json)
Hash identifier: PgA8ru/ZPI/xfooPqMjce29tOrAdWg3wMij0YnVlZvw=
Subject key identifier: F3:F4:8F:22:DD:2E:17:AE:4B:AB:CF:81:36:60:71:FE:05:73:8E:63
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B065F7976638344970D1AC40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1dfb39a2-7b4a-39f0-9349-a91e235b912b.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.150.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:f7:97:66:38:34:49:70:d1:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=bc8d1cd8-fba3-4633-b6b0-5e4444e2e352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:2f:59:bd:c5:70:95:43:c3:a7:47:b1:82:
bf:ae:28:52:68:00:be:9b:95:aa:5f:fd:35:c1:42:
11:91:a6:68:46:f0:5a:10:c3:8e:e3:24:b3:b2:4e:
a0:42:c8:64:89:68:2b:64:e8:00:e0:0a:86:bf:7c:
ef:7a:e7:a7:02:b0:5e:09:9d:d0:8b:9c:03:a1:0e:
a2:22:b3:34:6c:e1:c7:36:0e:b2:f9:83:76:ea:17:
21:27:c5:10:53:d4:1c:d9:76:f7:b9:21:22:5c:3f:
0a:18:c8:07:f3:0f:61:ea:3f:a2:4b:b7:35:d8:09:
5d:2a:c5:7b:84:39:02:91:3f:0a:73:44:3e:18:09:
9e:45:13:3e:3f:78:f9:76:b8:41:5c:55:61:a1:0b:
b1:b5:65:19:6a:96:22:c5:42:a5:e8:e0:88:17:09:
3f:a0:9b:68:72:b7:f4:1a:44:7e:77:cf:f0:fc:5d:
58:4b:fb:6c:b4:1c:60:c2:09:ec:fa:70:56:b2:d7:
66:22:03:6f:5f:14:7d:4c:a9:fa:4f:86:0d:7f:4b:
dd:ad:69:e0:65:f7:57:1b:39:1b:9a:30:31:73:fb:
24:18:39:40:e0:4b:fd:d8:e9:35:f5:7b:93:f5:88:
3c:60:e4:fd:e1:21:62:5c:ec:99:7e:d5:49:ea:36:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:8F:22:DD:2E:17:AE:4B:AB:CF:81:36:60:71:FE:05:73:8E:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1dfb39a2-7b4a-39f0-9349-a91e235b912b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.150.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:42:23:01:f3:6a:f5:d5:63:07:30:d0:16:bb:be:2c:50:e0:
b6:46:fb:a0:0f:7a:71:af:14:66:da:1d:63:31:fe:38:4c:22:
4f:30:26:96:01:29:e7:06:ad:c2:1d:95:9b:51:18:ba:43:55:
f8:89:d4:82:da:db:24:bd:bd:be:6b:f2:06:43:a6:96:d4:b4:
48:7e:62:78:be:4d:12:e8:3b:40:06:40:fe:8f:07:d1:68:29:
0e:80:23:3f:37:f3:3d:20:6b:b2:c3:d6:40:46:59:9b:f9:90:
2e:5c:ef:b4:e4:c5:ce:c9:86:8a:76:d9:92:36:dd:bf:b2:0e:
52:7c:46:30:82:59:2e:c2:49:3f:a5:89:3b:b4:b8:33:3e:28:
1a:81:46:f4:07:71:c6:d2:ba:f2:f4:8a:cb:42:48:34:ab:61:
f6:5d:10:91:03:68:9e:29:2a:3d:a5:cf:bf:04:74:b6:e3:b1:
af:f4:9c:01:81:ab:11:a9:7b:67:90:e9:66:76:f0:5d:75:f8:
57:6a:4e:c0:5f:84:94:5b:15:97:94:2b:b9:8b:d0:02:61:a3:
61:0f:83:01:4b:cb:df:12:59:9b:6a:93:5b:ab:a6:8a:f4:f4:
a5:38:59:fc:ac:46:3e:c7:cb:f3:42:09:6c:cc:60:d6:93:26:
9f:b4:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:39:30 2025 by rpki-client