Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a8d0ad5-20db-3cd2-bad7-a0b131216fb9.roa
File: 2a8d0ad5-20db-3cd2-bad7-a0b131216fb9.roa (raw, json)
Hash identifier: 5OzbiYqNPtpaHHm27IxTATwBsLjPnVjgT3CbU9eJ6gs=
Subject key identifier: E0:F5:22:EE:F1:AA:A5:22:38:FC:84:37:0E:2A:D0:8A:85:D9:78:0B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F6EF9E7B79FDA633A662C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a8d0ad5-20db-3cd2-bad7-a0b131216fb9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.141.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:ef:9e:7b:79:fd:a6:33:a6:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7267d495-5cc9-4546-8cf5-5c51789a8038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:41:8d:09:43:d1:aa:e3:29:5d:19:0a:5a:06:
b5:90:0e:79:85:4f:b1:25:c9:cf:0e:6b:2b:3c:4a:
de:6a:7e:fb:c0:40:94:4f:db:11:2c:87:5d:46:72:
bf:a0:f0:a2:be:9d:f7:a5:c4:76:54:6e:17:f8:3a:
48:81:2f:04:b0:4b:cc:0c:dd:63:d1:9a:f6:43:2b:
35:fa:eb:cf:17:3a:af:c6:21:88:cb:aa:1f:d6:68:
9e:d2:71:25:66:70:37:7c:b1:5f:fa:0a:f9:ec:dc:
d3:7a:b9:92:bb:c1:ea:4a:21:47:76:5c:e8:5b:e9:
84:a2:61:37:0b:2c:18:12:c4:cd:41:f8:ac:8d:b0:
1c:e9:e7:7c:81:2e:24:6a:9d:ef:92:e6:5b:40:92:
ea:db:20:f1:6c:e2:bc:37:3e:28:e8:34:94:0f:98:
fb:cc:9b:4b:ac:48:6a:e6:78:40:99:a8:40:a7:bc:
bb:a7:a9:a3:86:37:44:aa:2e:dd:87:89:f6:d6:22:
29:e6:cd:be:70:0f:97:e2:d8:6a:6f:15:89:50:16:
b1:bb:05:8f:ae:9f:32:de:59:cd:a1:6e:e5:70:63:
28:c9:5b:18:c7:bb:76:15:0c:92:11:0d:2d:67:0b:
83:b0:7e:04:0f:85:ae:06:b6:06:01:5a:98:fe:5c:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:22:EE:F1:AA:A5:22:38:FC:84:37:0E:2A:D0:8A:85:D9:78:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a8d0ad5-20db-3cd2-bad7-a0b131216fb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.141.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:49:a4:f2:ee:59:49:29:fe:e8:b9:8e:e6:c1:82:07:c8:54:
8d:b6:71:71:11:0d:f6:60:1d:34:e1:da:9b:67:9b:1b:2b:4d:
13:76:5a:c3:34:a9:cb:a0:c9:4b:d5:8c:1a:de:cd:c7:66:17:
09:dd:59:5e:a1:da:e3:af:41:34:fb:a9:e3:ba:67:2f:e7:47:
46:0c:31:fb:85:cc:bb:34:72:b3:bd:6a:36:a5:88:86:f4:4f:
12:e8:77:cf:ee:f2:f2:31:58:4c:eb:17:31:3b:0f:e8:63:a0:
51:44:aa:20:93:89:e2:d3:83:e2:e9:07:22:f7:2f:97:e3:6f:
22:e5:9e:9c:05:2b:93:41:5b:61:10:ee:82:2b:98:cf:77:45:
69:74:60:11:e4:96:ba:75:08:f1:00:58:42:cf:c3:ae:13:8b:
7d:8f:cc:e9:da:97:a3:d0:47:1e:73:f4:c8:58:82:be:32:ae:
4f:49:c0:95:26:37:8e:b0:50:8f:07:01:34:f3:ea:0c:9c:21:
b6:7a:9c:24:70:63:37:de:81:ea:08:c0:88:12:5c:0c:bc:2d:
b9:78:3f:52:f6:f2:ba:56:a5:e8:4d:75:eb:05:30:6c:2c:d4:
56:f4:2f:05:61:e0:7c:54:ce:b6:96:0d:55:81:39:1f:27:44:
91:e0:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:14:26 2025 by rpki-client