Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e33e3a1-6374-3b28-87c3-d57373968c15.roa
File: 2e33e3a1-6374-3b28-87c3-d57373968c15.roa (raw, json)
Hash identifier: bGNyyjTbxtG/m1q7d/GMnpegQ6iff05SbpNNAAqugV0=
Subject key identifier: E7:CD:D4:2E:E3:66:CE:F2:26:B5:04:D6:18:1B:6D:3A:2A:6F:70:43
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE85D8694A17F3FECAC5E0C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e33e3a1-6374-3b28-87c3-d57373968c15.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Sun 29 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.156.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:85:d8:69:4a:17:f3:fe:ca:c5:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Sep 29 04:00:00 2024 GMT
Subject: CN=fe4ab545-cc99-40c5-a433-160228be29ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:32:40:bb:3b:c4:32:8e:17:e6:35:b5:45:
00:65:a7:80:d0:5e:f4:03:1e:fe:6e:e5:fb:ca:0d:
d9:c6:11:98:6c:22:e3:79:4e:7b:ca:1e:5f:ed:71:
97:77:52:81:48:30:df:6a:0c:56:39:84:af:2e:a1:
cf:a8:6b:54:fb:7e:9b:b1:44:9b:ed:2b:a1:c3:ce:
17:0b:58:b2:56:57:11:c6:53:73:e5:e4:64:ad:66:
8b:d0:9f:f9:ff:d1:db:5c:21:e5:77:33:fc:16:25:
2d:ce:59:cf:96:57:24:0e:b3:40:5e:79:cc:6a:74:
2b:6d:4f:c0:13:77:44:cd:f4:26:3e:76:b4:2c:ef:
bd:8f:b7:bf:83:54:db:50:f4:a1:dd:f2:01:8f:f6:
61:30:67:7a:4f:77:1e:1c:b8:a9:ff:c3:8d:7e:16:
23:51:25:db:40:89:d7:26:cf:e8:f6:95:a4:f2:86:
eb:f5:2a:b0:6e:b0:23:71:c1:39:f2:7e:04:ee:27:
09:80:55:ca:c8:a6:89:ac:36:ec:72:53:2c:50:f3:
0d:63:aa:e0:7f:ea:67:67:c3:2c:7f:3b:a6:f2:b8:
dc:cc:10:f3:8a:33:7c:71:2b:e3:32:11:3d:57:b9:
a9:09:cc:fe:7e:5d:16:7e:94:5e:7d:16:65:22:d6:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CD:D4:2E:E3:66:CE:F2:26:B5:04:D6:18:1B:6D:3A:2A:6F:70:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e33e3a1-6374-3b28-87c3-d57373968c15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:94:cb:f7:5a:78:47:a9:3a:7c:3e:b8:94:38:2d:69:75:2e:
00:08:fb:98:e3:33:67:df:75:45:73:5f:40:2b:c5:54:df:2e:
8a:34:21:08:8e:1c:45:b2:66:24:a6:b9:d3:98:43:28:0f:da:
9f:ff:e4:f7:7b:5a:41:8e:05:4f:95:4f:8e:01:26:8b:c8:9f:
6b:42:d9:1a:59:4a:52:4a:73:1f:ce:75:d9:46:b6:7b:63:a5:
c2:de:7f:cf:2f:59:83:a8:d2:56:db:93:50:8d:c2:dc:05:fa:
65:dc:cb:7e:e0:9f:f4:95:76:41:1f:23:08:b1:1d:a2:82:61:
e7:ea:25:10:fd:f1:d9:be:ab:7b:b7:12:4b:ad:b9:6e:7d:a0:
09:25:7a:48:0e:91:5e:60:d7:fe:aa:7a:e1:01:be:60:97:50:
0d:d9:ca:dc:89:82:66:01:d7:aa:fd:ee:e7:25:73:02:41:a1:
25:e7:2d:e3:42:67:58:11:35:5c:da:ce:31:5f:25:0d:e8:ed:
54:57:28:0c:8c:93:58:16:3b:a4:59:62:85:74:3e:9f:00:08:
c6:37:3f:f6:8d:33:81:74:6a:b1:81:3b:71:b9:6e:17:15:66:
27:42:b5:55:72:db:e1:25:bc:2f:45:5d:84:ca:b8:51:9a:11:
50:8a:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:55:06 2025 by rpki-client