Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3259fe5c-3cfe-34e2-a159-f6cde51b97ff.roa
File: 3259fe5c-3cfe-34e2-a159-f6cde51b97ff.roa (raw, json)
Hash identifier: zmjZL6IbU/O8p4KXUbl9kZSb9/tnwW7AvKeyt2N91Bg=
Subject key identifier: 48:9B:0B:D7:8F:99:33:1B:3A:C6:EC:F1:D5:41:5F:DC:A6:8A:A1:3E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A11EEBCDF67F72833A6600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3259fe5c-3cfe-34e2-a159-f6cde51b97ff.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.119.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:1e:eb:cd:f6:7f:72:83:3a:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=803f43f4-f196-4bd5-976e-fd00bf1c29e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:c2:ce:92:15:85:bf:06:37:5a:a7:7d:22:
df:99:61:1a:a9:96:33:3d:4e:80:b9:96:4d:4d:21:
48:d5:70:51:c0:a0:db:d4:0a:0d:8d:5a:da:b1:17:
36:27:a7:c3:e4:9a:96:91:da:73:10:d9:43:06:d4:
e1:13:54:34:78:14:64:b9:a8:dc:e5:47:75:e7:c8:
d9:76:af:ae:02:47:c5:4f:b5:fd:f7:cb:cb:5c:f4:
61:5c:23:61:33:2a:14:6a:21:b0:44:be:6f:a2:d8:
88:de:72:8f:df:aa:9c:db:5c:b5:24:23:1c:29:52:
03:0e:3f:92:6a:04:1b:b5:38:97:1d:f5:09:e5:a7:
19:12:80:3d:93:c9:e8:3f:1f:50:96:f5:85:3a:62:
d7:74:4e:ec:40:3d:3b:86:5e:92:a9:e2:04:d1:e5:
fa:5c:7f:63:f3:68:57:a0:09:cd:b8:fc:af:1c:a3:
d9:9e:07:18:0f:32:c9:14:40:86:22:f1:9b:8f:f1:
bb:87:f5:3e:28:11:21:71:d1:f6:8b:49:ea:56:8c:
e5:ff:f9:ba:e5:eb:d6:b7:b3:7a:da:89:d5:53:a6:
ac:90:43:46:22:42:2f:37:c0:03:4f:eb:aa:f4:67:
17:f2:b6:ad:47:2f:28:08:69:2e:33:07:9e:90:9e:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:0B:D7:8F:99:33:1B:3A:C6:EC:F1:D5:41:5F:DC:A6:8A:A1:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3259fe5c-3cfe-34e2-a159-f6cde51b97ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.119.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:87:ff:db:9a:06:07:4a:7f:47:bc:5a:a7:84:46:50:cf:6b:
6c:ab:39:af:84:97:08:c8:a8:7b:fa:86:85:0b:c3:9e:e4:07:
92:29:dc:76:7d:ae:91:01:85:8b:66:b7:ce:46:5a:bd:7d:1f:
bf:3d:25:da:45:74:12:c5:e0:2d:54:c4:d9:03:f1:de:0c:a7:
76:4f:6c:e4:31:cb:78:33:4a:88:37:a9:5e:e8:c5:75:c2:ed:
bc:e2:ce:e3:f1:d9:75:0b:a4:4b:bb:06:23:55:9a:36:55:9c:
5d:ef:aa:6d:7e:48:3c:82:4f:fe:e4:f2:07:ad:b3:fc:9c:0a:
97:78:c6:5e:60:ae:e4:e1:44:60:07:00:aa:6e:1b:37:3a:c9:
53:c2:c2:25:a9:63:87:fe:f7:f1:50:11:02:2d:75:c2:99:18:
99:25:71:1a:3b:28:45:52:30:28:c5:18:b0:25:59:ec:9b:fb:
59:58:15:89:81:2d:1f:17:05:81:4f:63:e5:43:ec:3b:9b:0d:
e4:37:7c:5d:94:46:fd:93:a9:e3:bd:71:63:36:f7:6c:9d:ae:
f1:09:f4:a3:b3:23:99:fe:b8:01:0e:a0:d7:f2:ee:39:1d:c7:
13:cf:e8:0a:53:3a:0e:9a:f2:78:10:71:64:93:85:7d:12:08:
99:ac:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:33:17 2025 by rpki-client