Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/480d5e07-686f-39b0-85ad-f8712bcdfc36.roa
File: 480d5e07-686f-39b0-85ad-f8712bcdfc36.roa (raw, json)
Hash identifier: H2AkL5zI41einUri8lo66zG/+SQ1MU3Yf9+zX/XH9CA=
Subject key identifier: 01:DA:6C:A7:FF:1A:E8:D7:06:2A:E6:7E:27:0D:CD:A0:F4:F2:FB:E8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A033C7754D11CB5BA97C1E8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/480d5e07-686f-39b0-85ad-f8712bcdfc36.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.150.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:3c:77:54:d1:1c:b5:ba:97:c1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cd417df8-75c5-4376-9ba8-7ae6f8c77cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:2f:66:5e:ce:dc:9c:36:d9:34:a8:15:fe:
fd:0a:d2:f9:7b:c4:c4:f7:d8:88:91:c6:b0:80:17:
e7:94:32:69:df:e6:75:06:9b:18:46:1b:87:35:ef:
13:61:d0:8c:10:dc:bf:e8:a7:8a:20:77:94:8c:7e:
e4:7e:ba:2c:1b:f4:0f:34:88:96:c7:19:0b:0d:6c:
25:09:41:14:33:29:ab:19:5e:91:76:be:eb:30:5b:
9d:c5:af:e5:19:f5:6d:2f:52:99:c2:ec:7c:3d:a7:
72:81:bd:87:b5:d4:cc:40:1b:13:97:9e:4f:a3:dc:
5f:7d:4a:f1:4b:c1:18:3b:00:73:6d:4f:c7:87:15:
74:17:2c:ba:ac:d1:65:19:cc:3b:41:9c:03:c8:05:
92:8f:20:15:c8:63:5b:1d:bd:0e:4b:8d:5f:7c:a1:
52:71:e4:c6:4b:e7:95:9d:f7:21:54:c6:7f:f9:1e:
0c:44:66:ee:db:b5:8b:a1:6a:37:bf:b2:da:e2:49:
98:2f:6c:6d:7c:ae:25:51:9b:1c:47:23:1d:84:81:
e9:3b:4b:b2:eb:3a:b8:da:82:e4:80:89:fb:d3:d4:
64:75:a2:6f:a0:b3:e4:1b:ce:da:35:f0:e1:24:f8:
1e:30:d2:55:ba:a7:96:83:89:9f:07:19:f3:bc:2a:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:6C:A7:FF:1A:E8:D7:06:2A:E6:7E:27:0D:CD:A0:F4:F2:FB:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/480d5e07-686f-39b0-85ad-f8712bcdfc36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.150.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:af:44:ca:ef:42:10:91:17:e5:0a:6b:f9:8f:60:51:44:e4:
cf:c4:e1:3c:d9:81:98:2a:e8:23:81:01:47:82:c4:80:8d:c3:
a9:25:73:8f:e3:0b:c3:75:26:b8:20:2f:c2:f9:0c:d6:fc:d6:
a7:2e:68:73:1d:a3:be:6c:67:c8:d2:4c:e1:39:32:7e:df:87:
66:64:bc:dc:73:f0:4d:d8:c5:fd:5d:32:8f:41:97:4a:90:73:
aa:32:b6:2e:13:6a:77:90:8f:f0:70:71:bd:3e:6a:b9:9b:8f:
c5:5b:60:95:43:b2:df:59:4e:1d:98:4e:ec:d9:76:50:6d:93:
d4:41:b9:2a:fe:30:f9:c3:a0:bf:87:da:c0:32:74:28:df:3c:
2c:64:f4:87:be:3e:1d:23:df:44:a3:4f:26:83:0e:93:c5:f9:
95:33:3a:cb:b5:7b:d9:60:5d:f8:21:14:99:a5:66:ab:a4:f5:
bb:a0:05:66:f3:dc:56:1f:51:ed:a6:e3:96:05:51:51:e6:42:
c1:fb:d5:15:7d:d8:49:c8:41:9e:b9:ec:6b:64:14:9f:36:98:
4f:75:fb:0d:92:62:75:a1:f0:57:c8:9f:d8:1e:1e:24:d6:81:
19:05:2d:51:ae:30:12:57:ce:f1:fc:0a:a9:6b:e7:95:33:84:
dc:69:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:47 2025 by rpki-client