Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f370253-0a90-36c6-8bfa-bf2e7fd39896.roa
File: 3f370253-0a90-36c6-8bfa-bf2e7fd39896.roa (raw, json)
Hash identifier: Vb6H9xU9OScVqf69FxmvJIV5HMZoX9/6xttq9Yt+0Ss=
Subject key identifier: B8:01:F1:5E:A2:AB:96:5D:F2:26:D4:2E:65:D7:05:11:71:AA:BF:A1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0C21624AB2EBCCE3B27700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f370253-0a90-36c6-8bfa-bf2e7fd39896.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.168.0.0/13 maxlen: 13
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:21:62:4a:b2:eb:cc:e3:b2:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5d56c3a5-1569-49bd-a5b4-8e462be039e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:d0:37:29:f5:c3:4b:ed:c7:bb:f3:a6:34:
6b:16:ba:3e:67:e6:97:b7:40:79:39:52:8f:ae:20:
20:c5:f9:b6:e7:21:3b:64:fb:ea:87:b9:4f:ff:91:
81:e3:97:62:5d:f4:7d:a2:3b:f3:2f:c8:9e:ee:01:
60:7f:ef:f7:ac:93:31:a5:29:40:0d:16:fa:ef:c0:
f2:ce:2a:ab:6e:44:d4:c8:71:74:ac:5a:74:f2:e4:
8c:96:b5:33:32:22:97:a9:17:86:b6:c0:63:df:55:
72:53:f8:16:cd:01:9e:96:23:c8:6d:99:6c:d8:43:
f9:58:1d:62:c7:25:bb:13:b5:1e:5b:51:ac:f4:f2:
1c:75:42:9e:7a:fb:db:f9:48:68:20:81:0f:23:9d:
44:0d:9a:a4:dd:dc:23:2f:5d:4e:2a:d4:7b:72:d6:
81:bf:93:e3:90:64:73:30:57:b9:57:33:07:1f:a9:
80:5a:e8:46:6b:b3:d4:79:0f:36:4b:6e:e5:7a:53:
d8:b7:69:45:43:9f:ae:39:8a:0f:54:26:aa:f1:2c:
40:17:f9:b2:ce:93:05:18:55:c7:b6:6a:65:79:ca:
b6:ad:03:c8:92:07:f7:e7:6b:88:ed:e7:8e:f0:02:
e2:59:b5:c0:06:ae:97:a5:cd:bb:ee:e2:c3:6c:c5:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:F1:5E:A2:AB:96:5D:F2:26:D4:2E:65:D7:05:11:71:AA:BF:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f370253-0a90-36c6-8bfa-bf2e7fd39896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.168.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:62:bc:f5:dd:61:4e:74:d8:fa:28:3c:e5:62:fa:24:f1:f7:
ce:c4:5f:c4:9e:5d:08:42:d2:6c:eb:6d:4f:54:ed:63:a1:2d:
9b:41:48:d4:53:93:a9:b0:e8:b3:40:73:97:ea:1b:f9:8b:af:
bc:5c:e4:3a:42:17:b4:7e:8f:6b:89:be:1a:75:19:a6:27:a5:
aa:59:5d:f2:2d:8e:4a:ea:66:ef:02:2b:d8:1e:dc:dd:f0:8f:
47:bb:d1:6c:ae:c1:60:57:15:c1:c1:7d:d9:80:6c:ae:0b:67:
ee:ff:a8:99:9c:d4:55:b6:29:8c:be:08:2c:8e:22:86:c5:c3:
f4:1d:05:99:2f:28:c3:62:50:bd:b8:ff:4b:f8:09:f8:67:0d:
0c:a3:f2:eb:7b:bb:e2:cc:85:41:0c:42:93:27:75:f6:5d:21:
e6:6a:1c:dc:71:94:7a:c5:6e:df:82:32:9f:d4:3f:59:9e:6e:
51:72:7e:25:b2:c7:a9:a5:38:5b:a5:f9:97:65:4b:1f:67:24:
56:6b:0d:a8:9a:05:09:15:3a:2a:7a:b1:ba:d2:0c:db:0d:c8:
39:50:9d:fa:a0:96:0a:19:51:9e:dd:b5:f1:52:19:66:cb:7b:
5e:0a:58:76:be:a1:e8:85:4c:ac:eb:0c:f3:05:f8:59:69:25:
08:0a:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:53:22 2025 by rpki-client