Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/336515be-ae12-34ba-a5fa-e95c4b9e3fe5.roa
File: 336515be-ae12-34ba-a5fa-e95c4b9e3fe5.roa (raw, json)
Hash identifier: hknq0kWypx3tTtvAUktAvgSpSCxTpQ/sJBXonzuyfIA=
Subject key identifier: 22:2F:80:53:2E:12:46:39:E7:90:EF:FB:CE:C9:2F:41:0C:55:48:A9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FB300A237EFBA87F813B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/336515be-ae12-34ba-a5fa-e95c4b9e3fe5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:30:0a:23:7e:fb:a8:7f:81:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9b273558-14be-438a-9482-057eae1bc651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:d3:87:79:b6:0e:b8:70:28:36:b2:dc:2a:
c2:7c:99:e6:0c:01:2a:d0:fb:80:e1:59:d3:5a:10:
a8:d8:47:f7:00:9c:67:c8:86:9f:2c:41:77:4e:fe:
56:0f:6a:88:50:b7:1c:6a:c8:fe:5c:ca:88:64:24:
91:41:3c:15:ad:10:5a:35:7a:2d:a2:a8:9a:01:20:
2c:c7:0c:a8:6b:9f:3f:c6:b0:88:07:c1:c0:bb:dd:
06:74:18:3e:67:5b:80:df:5c:5f:7f:cb:c8:b4:60:
32:66:41:2f:d0:4b:ea:b6:69:70:45:44:45:58:42:
fd:2f:8e:56:d0:6d:b7:b9:5a:45:5b:18:05:36:f2:
17:83:75:ef:e8:d0:d8:d4:82:d4:fc:22:66:74:c8:
63:05:09:43:b9:a1:a6:d0:42:ee:69:78:51:0a:6b:
fa:ca:d3:51:8e:da:e5:8e:e2:1f:63:62:44:30:7e:
98:5e:8d:46:2d:83:e1:a2:03:de:c8:90:34:5d:e5:
84:6f:7e:37:18:8f:3f:ce:e3:22:7c:0b:f0:89:88:
53:0c:7e:47:31:f4:ed:6f:97:ce:22:30:4d:79:a9:
95:ae:10:7f:18:c8:df:a8:70:cc:81:e4:73:44:da:
e8:03:a8:54:24:6a:4c:f1:00:35:e2:74:dc:aa:9c:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:80:53:2E:12:46:39:E7:90:EF:FB:CE:C9:2F:41:0C:55:48:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/336515be-ae12-34ba-a5fa-e95c4b9e3fe5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:47:f7:b6:41:8c:86:8a:88:f6:bb:ac:05:49:67:0f:c9:ba:
84:cc:93:68:5a:3d:3c:17:ab:d1:22:47:f0:ff:4c:e6:c0:cb:
92:aa:d0:86:5d:fe:68:02:92:06:01:a5:a8:a0:ed:dc:c8:43:
91:bf:dc:85:ce:5b:7f:41:bd:46:f4:4c:50:36:58:c2:9b:d8:
ce:69:84:85:57:2b:ec:1a:19:70:d0:2e:ce:39:16:f2:30:4e:
55:f6:22:1f:ee:8b:92:4d:3f:e8:d6:6d:1b:1c:f4:62:ce:5a:
8c:5f:b5:3c:92:85:5d:e0:61:8f:ba:71:ee:06:a8:5f:e6:a4:
b4:13:34:3d:6a:4c:46:fe:00:7a:22:fc:51:e9:7a:66:6b:ea:
e5:d9:7b:be:51:a0:48:a9:da:3d:1d:19:3a:97:08:29:7e:86:
b0:ab:fd:6d:c5:26:a7:ed:2c:ff:49:31:b9:18:55:9b:2b:18:
e1:3f:6f:a8:e4:f1:45:a5:1d:22:37:a4:ca:b4:c4:77:5b:7d:
aa:3a:22:13:3c:f5:f6:6a:75:44:7d:69:8f:a8:2a:da:ce:d1:
4c:9c:62:9d:d1:ad:d2:22:65:2e:0c:ef:45:25:28:75:a4:73:
4a:e0:f9:a6:ae:06:2d:80:c6:54:a6:8c:b5:5c:a1:0d:44:ad:
30:f1:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:53 2025 by rpki-client