Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ff51435-151d-3917-98fe-299b0fbc6022.roa
File: 1ff51435-151d-3917-98fe-299b0fbc6022.roa (raw, json)
Hash identifier: 85d0wTdC9WJRQjXAiRwc83kTUmAvepuDKMJn64beolA=
Subject key identifier: 4D:5A:E9:6F:11:E0:BE:0A:35:93:67:50:DB:4E:4F:18:3E:5B:85:E7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B0664E63984A5027B5C8F000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ff51435-151d-3917-98fe-299b0fbc6022.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.88.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:66:4e:63:98:4a:50:27:b5:c8:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=4d72e04b-4b68-4f93-ae83-35f91ec834ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f9:c4:e3:9a:a7:50:43:2e:4b:c5:64:9f:d9:
dc:1e:4e:da:0e:59:81:6a:0a:63:04:eb:63:5b:4f:
64:f3:fd:5b:37:36:be:de:a7:44:78:4d:f2:4f:02:
e2:6b:3a:83:f0:21:77:fe:4b:2e:98:fe:1d:7e:34:
0c:bd:1e:aa:54:1c:06:2c:15:5b:7e:3f:39:bb:f2:
4a:b2:f1:0e:8d:ed:bd:3f:c6:00:b0:be:b8:70:7c:
56:7a:f5:90:34:02:27:38:8d:32:b7:54:0b:66:8c:
24:e7:f1:c1:11:32:a6:be:22:02:d5:ec:f4:06:ee:
68:f8:d3:ef:d4:a6:02:54:c6:fa:fa:67:c5:cf:be:
53:56:80:82:93:e7:40:65:1b:4b:b7:1f:03:83:28:
9f:7f:7e:ce:1e:8a:d5:b3:61:db:fd:0e:4b:91:b4:
52:a4:92:c7:18:1c:a6:34:e8:d8:f2:e9:42:42:a3:
26:99:32:40:ce:fe:6c:7c:fc:c0:c4:45:f0:76:ce:
95:44:d9:11:9f:9f:3b:dd:a8:d9:91:a6:4b:57:36:
87:7d:ad:e0:ea:19:b7:70:44:54:e5:8d:e2:9d:0b:
96:25:83:4b:b8:30:f5:0c:b1:60:1a:75:ac:eb:67:
82:ee:a2:6c:e1:df:ec:42:a4:95:d3:8c:ff:00:6e:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5A:E9:6F:11:E0:BE:0A:35:93:67:50:DB:4E:4F:18:3E:5B:85:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ff51435-151d-3917-98fe-299b0fbc6022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:ba:e4:55:7d:05:e2:87:e6:05:b6:db:b2:0d:72:cc:23:5c:
7f:50:4c:02:ba:a4:47:06:72:71:6f:c6:92:1f:46:38:5a:f6:
a9:3d:47:42:99:d3:de:94:53:f4:9f:77:38:60:bc:88:d9:1b:
71:d7:c9:51:17:5c:99:89:f9:e9:37:01:45:78:22:f1:70:38:
e0:6c:e5:1c:b2:c8:be:4d:80:71:5e:26:d8:6e:e7:b8:af:e8:
d9:ea:bb:a9:76:72:6a:f5:87:d3:08:71:cc:1e:47:f3:b3:86:
4b:83:ad:cc:9f:27:b7:8d:06:62:4b:b9:82:e8:bd:d3:5e:b6:
35:a1:ec:2a:d6:53:3b:61:da:ed:e3:85:c4:0f:5b:63:f3:05:
db:d6:7a:e4:5c:dd:22:b6:ee:dd:60:da:8e:57:48:2d:9c:89:
4a:85:70:b2:d4:1c:90:46:28:9f:14:3b:90:1e:51:ee:fb:c2:
cf:93:36:25:5f:71:36:94:3a:ba:ea:af:4c:5e:92:bd:49:d5:
c3:2d:49:e0:1b:2b:7c:b8:5e:5d:53:8d:a6:50:af:b1:a2:7d:
b4:03:8f:b2:4f:2d:b3:59:29:a1:ff:4a:aa:cd:de:a8:f8:16:
82:a3:b0:0f:30:3d:54:d8:fa:a2:51:67:46:57:a7:2c:59:5b:
ab:b4:b1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:18:19 2025 by rpki-client