Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/236a6323-7072-3c56-9731-c41d2ec5959c.roa
File: 236a6323-7072-3c56-9731-c41d2ec5959c.roa (raw, json)
Hash identifier: 91x3To/dLd8oNfDIlmA8A0zSOgklXC9/98pERVAGXlA=
Subject key identifier: 87:E4:81:8A:A8:C2:CC:D3:22:22:0E:1D:8E:59:A0:E4:9C:4E:02:C2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A666523EFEA1A512F4D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/236a6323-7072-3c56-9731-c41d2ec5959c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.143.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:66:65:23:ef:ea:1a:51:2f:4d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=359feaff-fee8-40cf-8a30-d5b1954de7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:a4:18:71:07:f0:84:20:32:a2:90:08:63:
d6:ef:91:6f:31:f8:be:eb:73:6a:90:f1:1b:8d:95:
80:11:14:08:e7:b3:14:38:41:fc:f8:f7:7c:aa:5d:
bc:8a:30:81:c0:ba:12:ec:4a:c8:17:4c:27:e6:fd:
b0:54:fc:aa:a4:00:34:e8:76:32:8c:b0:e1:ae:5a:
26:29:91:1c:64:35:08:3f:69:e9:45:76:05:24:ec:
19:30:66:76:29:17:88:25:26:d6:0c:43:bc:52:24:
cc:f4:b2:9f:ac:c0:50:80:92:a6:0a:c4:7e:e5:42:
57:57:58:42:f1:fa:b3:2c:4f:b4:15:3e:7f:55:5d:
92:3f:ce:45:ee:9c:4a:12:cf:19:6e:67:52:15:b1:
1a:e1:c3:77:bc:0e:ee:b7:23:0e:07:b1:d3:2e:39:
9e:d0:4b:b1:92:4d:9c:96:68:70:ae:13:7b:52:a1:
73:c1:e1:f4:70:c6:39:31:78:17:7e:93:22:e3:e3:
1a:f2:ed:d5:c7:a8:63:5e:3e:f0:d7:3c:65:a0:4d:
c4:40:cb:13:16:0e:b6:e4:6a:b7:0f:22:64:9b:6b:
b6:bd:cd:9f:9e:a1:69:ba:68:85:e8:5a:2e:3d:c2:
99:e8:31:a5:d7:f9:43:4a:78:c9:8a:4d:6b:85:f8:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:81:8A:A8:C2:CC:D3:22:22:0E:1D:8E:59:A0:E4:9C:4E:02:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/236a6323-7072-3c56-9731-c41d2ec5959c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:26:a2:d8:6f:79:74:9f:17:ac:3b:e4:0d:92:1b:7f:eb:15:
7d:7f:d6:8f:77:84:96:7a:1c:f1:06:ae:4b:53:56:0b:3b:62:
51:8f:51:2a:25:ce:62:e0:82:a5:b6:85:14:ec:fa:12:2d:1f:
a8:b3:89:a7:62:21:10:e3:9b:4d:26:6a:84:b0:42:58:0d:5e:
d0:cc:40:14:d5:3f:92:21:15:26:64:5f:c3:39:89:f7:56:65:
c0:15:18:7e:22:eb:57:d2:11:d4:5f:ac:16:83:48:00:8f:c3:
2a:fe:80:41:cd:d0:28:1b:02:5f:da:d9:20:58:d6:7e:49:01:
47:5b:0d:bf:b7:a6:3b:af:d6:d7:10:3c:92:2c:fa:d0:1c:91:
a3:20:ac:06:33:a3:db:0c:71:c0:b5:19:ab:9a:61:a6:a3:a6:
52:f9:79:a9:7f:01:25:4a:c8:0d:fb:ce:ac:b6:3f:03:04:bd:
27:a7:3c:0e:ff:b9:ec:90:02:73:5c:ee:c6:00:1e:50:6c:b4:
e8:d9:04:5a:c8:f7:59:f9:68:b7:06:be:fe:98:d9:b6:b1:c4:
09:7d:db:5f:3e:8d:2a:a4:3c:30:46:4a:af:84:e2:c7:a5:7b:
d6:1b:f6:4c:1c:3f:2c:fa:59:a0:e8:4d:c9:7a:4e:83:da:9b:
7b:7e:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:19:01 2025 by rpki-client