Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e12fdf-258e-384a-87a5-8118411b08e5.roa
File: 42e12fdf-258e-384a-87a5-8118411b08e5.roa (raw, json)
Hash identifier: qa8lr2lWOwtCCIn1zbjcCupig03flLSz6bv5XUIAHP8=
Subject key identifier: EB:A3:74:13:8C:3A:9D:B0:26:77:3A:C5:8D:BF:01:38:AB:D2:4D:0F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583E25A6A23365EBBA9DEB0B6480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e12fdf-258e-384a-87a5-8118411b08e5.roa
Signing time: Sun 05 Jun 2022 12:00:00 +0000
ROA not before: Sun 05 Jun 2022 12:00:00 +0000
ROA not after: Sat 07 Sep 2024 04:00:00 +0000
asID: 19527
IP address blocks: 34.3.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:25:a6:a2:33:65:eb:ba:9d:eb:0b:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 5 12:00:00 2022 GMT
Not After : Sep 7 04:00:00 2024 GMT
Subject: CN=b13792f4-d04f-4fce-84db-a01a49250786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:9c:2b:40:9a:10:70:23:40:5a:8a:0b:f0:
75:e7:36:c7:d1:bb:8f:3d:e0:f3:1f:0a:5a:18:e6:
95:4e:b3:89:86:c0:66:57:33:2c:33:6f:58:56:4b:
b0:1e:89:8d:bc:74:73:5d:15:76:39:7d:16:5c:26:
8b:39:01:24:1e:ca:0c:af:25:29:80:9f:df:e6:21:
a5:5e:67:9e:ea:81:70:39:78:40:4e:01:a1:f2:32:
b8:5f:59:a7:45:5d:30:96:82:37:34:5f:e3:74:27:
be:6d:40:e3:ff:82:3f:bd:c7:92:5e:ff:e6:38:15:
b6:28:53:d2:11:60:36:f0:2f:7b:e5:c1:c4:cf:fe:
e3:50:cc:ca:9a:34:f0:f0:c9:9f:a4:b4:62:95:fd:
de:67:58:ac:4c:94:cd:c1:95:64:24:d4:ec:4a:97:
22:1c:ef:67:c6:b8:8f:67:a6:92:c8:e4:7e:cb:c5:
6f:41:22:2a:30:4c:ca:0d:ae:4b:d6:4b:b9:94:a5:
e3:6f:21:7f:b7:30:2e:7d:40:92:92:db:f6:66:7c:
c5:b7:d6:82:92:89:32:82:ba:37:80:95:7b:97:95:
64:fe:e5:7e:75:44:c4:11:cc:36:de:26:56:0e:9e:
92:b6:80:26:3d:fb:35:29:1b:c0:f1:2e:63:d5:57:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:74:13:8C:3A:9D:B0:26:77:3A:C5:8D:BF:01:38:AB:D2:4D:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e12fdf-258e-384a-87a5-8118411b08e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e0:5e:20:da:54:81:d2:86:f2:a0:e4:99:08:4c:c1:78:56:
10:72:6d:b6:21:58:2d:03:d2:9a:72:7c:66:ab:1d:03:fd:15:
8d:d4:e1:c8:93:f6:fc:54:07:2a:c9:01:f9:6c:fd:dd:8b:4a:
56:0f:d0:32:ee:be:e2:60:04:85:d3:7e:97:fa:b1:e6:11:8d:
3b:c9:78:51:55:80:cc:1c:3f:fd:dc:28:01:82:95:74:f1:df:
58:05:f7:b6:08:78:b7:5c:0c:d4:d5:28:0d:c4:4b:03:f0:46:
31:04:bf:d7:8e:ba:84:e0:9d:0a:56:69:95:4e:ad:1d:b0:0c:
7d:e3:c1:ab:a2:34:38:c4:8b:da:9c:fa:8a:82:c9:08:25:3e:
4c:f2:7e:d9:82:9b:dd:1f:21:79:f8:19:92:b1:03:d4:8c:bb:
13:a1:66:de:3e:26:30:b3:29:31:79:22:49:29:d5:4d:83:a5:
0c:3e:09:e7:17:aa:0b:a6:a8:37:a7:ab:de:35:48:4d:33:a6:
4a:be:87:b5:0f:ef:7a:92:84:42:eb:36:a2:c0:a7:fc:cd:14:
d5:94:61:07:98:96:ca:8f:18:17:94:7d:a2:2f:dc:c4:ed:d8:
14:48:8c:cf:e1:b2:f9:0e:3a:51:3c:47:62:a8:ea:e9:7d:a6:
db:8f:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:02:13 2025 by rpki-client