Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f917d40-0702-31f2-8e7d-1941363b3521.roa
File: 1f917d40-0702-31f2-8e7d-1941363b3521.roa (raw, json)
Hash identifier: l6x6aBRFHkPQoluj21APxX5/NTBqYB1f1Gj54KWEjS8=
Subject key identifier: 28:A8:AD:01:7F:CD:C1:A5:C5:46:14:02:D8:F2:F5:31:B9:A5:F3:4B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A07A30040425812ABEFB600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f917d40-0702-31f2-8e7d-1941363b3521.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.147.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:a3:00:40:42:58:12:ab:ef:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6578b82a-cef6-46dc-a5e1-ea8f3aac17fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:08:59:10:e0:f0:22:c0:a5:c5:00:c2:1b:
71:7f:a5:02:79:d7:93:f1:78:e0:81:9b:c9:24:6e:
f4:2a:7a:95:77:a9:b3:d5:1c:ba:8c:68:7e:e3:2c:
2e:5f:6e:2c:aa:70:cf:2d:98:22:07:54:9b:c7:f6:
2e:fc:26:73:f4:a6:1c:bf:f8:e9:ef:98:a6:84:94:
f3:d8:59:01:01:47:ad:a1:57:2c:21:4f:ff:a5:d5:
f9:82:c9:da:6a:11:47:4f:be:c5:a2:ee:04:2a:49:
14:fb:40:ab:56:8f:e1:00:9d:58:90:50:53:b8:f2:
74:2e:d9:84:97:a2:63:a8:68:75:26:00:b6:42:b3:
5d:2f:ea:ec:aa:61:37:55:c8:49:3b:6a:8a:e4:3f:
30:92:cd:57:c2:c6:60:fc:eb:4a:f9:12:ad:01:7a:
11:35:96:05:a3:e0:2e:06:8d:82:94:b3:87:7e:fb:
09:c3:87:1b:77:1b:dc:d8:28:0e:88:01:e2:04:56:
83:9d:cc:ed:ba:f6:9d:8b:e7:93:4c:55:c8:80:d2:
4e:8a:f3:70:66:d0:17:a5:9b:1e:42:9b:a9:e9:ae:
ca:a9:4f:1c:64:36:b5:e3:80:43:52:20:d1:a1:04:
24:93:63:99:05:0c:45:fc:60:27:5c:c0:66:18:e5:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A8:AD:01:7F:CD:C1:A5:C5:46:14:02:D8:F2:F5:31:B9:A5:F3:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f917d40-0702-31f2-8e7d-1941363b3521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.147.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:8d:ab:7e:c2:a7:8f:e5:1a:bc:44:58:d4:f5:5c:74:33:14:
14:6f:a4:fd:3c:fc:06:2a:0f:1b:7b:28:f2:03:93:6a:db:bd:
88:06:9c:f2:3a:16:47:8b:0b:49:ff:eb:9c:b3:d5:5d:53:55:
88:47:7d:5d:9b:6c:d2:72:20:66:e9:c7:6f:07:33:54:10:8a:
55:7e:6a:b7:43:b7:07:57:42:d9:1d:72:9d:b7:5e:af:92:6a:
a4:04:79:9b:88:1b:33:a7:db:27:b1:5a:9c:e9:7f:9a:80:45:
d5:0f:b6:66:22:1f:6e:d8:95:c3:5f:c6:2b:e6:0e:6b:ae:3f:
5a:27:27:5c:62:4e:b7:b0:4b:59:44:69:2d:2f:a1:65:9b:72:
b5:83:2b:63:db:22:7a:f6:67:43:db:6f:65:a8:7c:23:f0:7e:
7e:66:48:2d:a7:84:4a:bb:18:14:98:a2:92:b7:ad:f1:8d:5a:
b7:0a:d9:f1:7e:af:07:a7:b7:69:a3:80:76:23:f9:9f:59:57:
8d:62:94:10:af:68:0d:53:87:02:79:7b:ea:93:7d:44:42:4d:
78:9b:31:03:11:2b:28:79:45:6f:c2:ad:fc:1b:c0:7c:9d:55:
30:6e:29:29:bc:27:25:c5:41:20:00:f3:1a:ea:9e:ed:2a:9d:
c7:ad:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:31:16 2025 by rpki-client