Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3573431b-643b-38eb-8f0c-b544973cd117.roa
File: 3573431b-643b-38eb-8f0c-b544973cd117.roa (raw, json)
Hash identifier: MPCEu5STwfpNUu4t9CTg+3JOFr/xTpTZ3ZUsESSDjJ8=
Subject key identifier: 6E:65:50:5B:51:60:F2:A3:EE:08:DA:09:88:C3:0F:E4:4E:31:CB:C5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A25F548FA2B595668D0F100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3573431b-643b-38eb-8f0c-b544973cd117.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.129.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:25:f5:48:fa:2b:59:56:68:d0:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f303de88-7c81-4174-a3f7-1d82446f319b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:df:0d:3c:7d:8b:8e:25:39:1d:d8:bd:9d:
8e:4a:17:b3:93:b7:95:19:52:c2:ee:e7:e0:6e:55:
7a:04:81:8d:e7:fe:e8:ec:87:a9:b4:d6:19:b8:b9:
69:ea:23:90:05:eb:55:7c:96:1a:03:7a:4a:68:92:
1e:51:3e:fd:e0:77:2d:3c:9f:4a:19:07:90:3c:06:
f0:4c:cb:b4:90:76:6b:65:0b:47:21:3a:d7:52:2e:
f7:d7:bb:6e:3f:ee:25:e7:23:48:8a:fd:a9:25:91:
72:21:91:78:09:bd:9c:64:95:26:c1:74:d3:d9:63:
b3:b7:fc:f4:e6:89:b3:8f:a2:1b:87:8c:a7:3e:7e:
dc:04:63:c6:ce:58:42:fa:55:6c:f3:4e:a0:5a:eb:
ed:32:88:73:5b:4b:ac:a0:90:f8:9f:fc:cc:67:b5:
01:dd:b6:6e:b7:b7:9b:75:91:db:b0:d4:a6:f9:04:
f3:b0:20:9c:16:dc:96:5f:6c:8a:44:04:b4:38:e4:
dc:a3:62:f2:7a:88:f3:bb:ac:9d:92:b5:5f:8d:58:
87:72:c3:2f:7a:3b:76:b8:e5:1a:81:63:ec:37:b8:
df:42:59:af:3c:81:80:15:4e:9f:6d:10:e5:01:91:
36:3b:93:71:46:13:7a:d2:21:ab:19:1c:21:7f:aa:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:65:50:5B:51:60:F2:A3:EE:08:DA:09:88:C3:0F:E4:4E:31:CB:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3573431b-643b-38eb-8f0c-b544973cd117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:77:d7:23:d2:f2:84:05:7d:19:56:83:70:15:ca:02:26:87:
2b:9c:ff:bd:c7:c7:26:23:b4:bd:b5:13:20:30:f9:10:bf:e7:
ea:1a:2e:e0:e8:70:11:3b:b8:26:20:3d:63:d5:df:92:3a:d9:
d3:dc:f2:20:b4:f6:57:66:51:eb:7d:90:c3:0a:5a:a9:15:af:
b2:06:b4:86:9c:8e:2c:d7:c2:7e:cc:79:d0:51:17:2c:3a:de:
7b:34:91:78:8c:ff:17:8b:b8:f2:b6:c6:4a:71:93:93:d0:94:
4d:7a:dc:da:e3:64:b0:9a:aa:50:db:7b:bf:ab:bf:b9:c1:2d:
29:58:8c:ba:bc:af:80:f1:81:8d:dd:06:1c:6d:83:41:53:ff:
80:f4:e7:58:13:b7:57:84:b6:81:89:c8:85:cb:36:09:f3:2f:
14:45:54:66:6b:a9:c5:88:ec:04:3f:35:87:2c:87:5f:80:38:
fa:8b:90:ff:7d:64:c3:9c:82:46:31:e6:a8:19:04:6b:74:14:
93:b6:fc:fe:2b:c4:1f:52:8b:54:bc:75:40:76:42:ef:ac:96:
a7:d9:f6:2e:23:18:59:e8:40:5d:95:cc:19:03:19:e0:ff:b3:
ff:0d:7d:bb:9a:c4:24:6b:1f:a1:f3:92:dd:1e:c9:a7:db:a4:
4f:14:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:22:37 2025 by rpki-client