Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2af4243c-4083-30c4-9c88-548e05bf5d25.roa
File: 2af4243c-4083-30c4-9c88-548e05bf5d25.roa (raw, json)
Hash identifier: TMmLgQx4AzpKCk6C/GtNTnVRV5Kvf7wfqSFzqhW83ls=
Subject key identifier: E4:DE:64:80:95:29:90:37:AF:33:53:4F:A4:8C:FC:46:0C:B0:82:CA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F6A34DB35EA18CC0A09700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2af4243c-4083-30c4-9c88-548e05bf5d25.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.71.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:a3:4d:b3:5e:a1:8c:c0:a0:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=68478cfb-2f1f-457a-9d51-92b852a13876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:15:bc:03:9f:e8:8d:bc:5c:4e:88:b3:c4:
2d:bd:60:33:cd:98:bf:17:15:3c:6b:0f:7e:83:b1:
35:a5:17:51:75:44:6c:24:49:68:d3:e9:ca:ba:59:
7b:b6:b5:a9:30:80:5e:52:35:eb:11:f2:7d:76:b9:
41:b8:eb:bc:d4:24:a1:90:ed:3b:4a:80:0e:16:fb:
96:9b:f5:af:79:38:e4:b7:63:01:f5:e4:0a:2f:85:
a8:fb:2e:5a:51:1a:ae:d0:08:3d:a1:20:27:e2:1b:
b3:f5:6b:6e:f0:dd:75:f0:fe:a1:0f:b4:86:74:ef:
36:a8:b9:2c:d6:7e:ce:9c:ae:a0:dd:b7:ec:90:ba:
82:37:8a:63:48:49:88:af:ca:42:62:99:b2:3f:11:
27:7d:e8:07:ff:a2:b1:da:33:f2:c4:98:88:35:1c:
eb:78:2d:53:96:0a:c5:c3:01:7a:41:32:6b:2e:97:
71:56:43:b6:c3:19:7c:71:a1:53:56:a9:f9:c4:cf:
1b:6b:7f:54:bb:a3:5c:78:ad:6e:59:3a:66:64:9f:
5a:e7:28:ee:0c:9d:de:a2:e0:e7:92:7b:de:db:56:
11:09:04:1f:a8:ce:e5:48:0e:70:d4:d1:5b:46:a6:
73:cf:52:6b:8d:19:bf:82:cd:3f:98:de:87:1c:35:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DE:64:80:95:29:90:37:AF:33:53:4F:A4:8C:FC:46:0C:B0:82:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2af4243c-4083-30c4-9c88-548e05bf5d25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.71.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:67:95:d5:f0:b8:1d:b8:01:15:62:51:d1:4c:40:b1:af:76:
c3:e3:a5:4c:3f:c8:98:11:e6:ec:6f:f7:a4:de:79:0c:b5:23:
19:7f:3e:02:ec:72:9c:06:0a:69:b9:ac:0b:b9:74:d2:9d:7c:
da:41:57:ce:84:11:ad:42:22:3d:93:78:fb:cd:ea:7f:52:b7:
31:7d:8b:ea:c8:22:7d:f3:ce:73:37:8c:d6:12:d8:9a:93:a8:
79:eb:46:1c:f8:09:0f:f9:f6:32:bb:34:2e:61:b3:66:fe:7f:
7f:3e:6d:76:6b:02:72:08:f0:d2:0b:a5:13:e8:e1:b1:a5:97:
b7:40:ac:50:51:5e:bc:00:5a:aa:91:bd:f9:a8:1c:cc:6a:75:
ae:a0:cd:eb:21:ab:85:a7:dd:8f:c4:ac:87:0c:53:2b:3f:4d:
7e:79:b2:da:dd:11:ba:aa:9c:7b:9a:ad:9f:f9:30:e9:3f:bd:
19:22:81:28:64:7b:ab:a1:ae:39:bc:fb:c3:55:16:74:8b:96:
45:c5:99:b9:9b:ca:9e:44:3e:fb:2b:33:89:4d:79:11:89:aa:
b4:b4:ca:cc:ff:e4:39:8c:86:00:cb:4a:75:5b:22:29:03:f0:
06:92:20:ab:b1:de:01:e0:fc:b3:b6:cc:82:85:3e:9e:93:4b:
ac:80:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:25:10 2025 by rpki-client