Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48e24096-30ae-351b-8783-2a723de8a961.roa
File: 48e24096-30ae-351b-8783-2a723de8a961.roa (raw, json)
Hash identifier: sRoLh/YNjA0zfNDsQj7d9jp9QcDtWlSiSc0FqDDeEF8=
Subject key identifier: 8D:AC:1E:E4:80:FB:03:A6:FF:AF:E7:9A:60:E6:6F:1B:2F:33:1B:4D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0DA9BB568B9D4E1614B480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48e24096-30ae-351b-8783-2a723de8a961.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0d:a9:bb:56:8b:9d:4e:16:14:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2fb89874-92f9-476d-8fb4-46dba057ec34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:4d:59:39:c7:c8:79:b4:2a:35:e8:09:9a:
89:66:33:9e:e0:16:92:f1:16:c4:30:6c:29:49:9c:
cb:3c:18:04:2e:74:7c:c7:74:f8:9e:50:67:a0:b1:
db:5b:25:59:ef:28:05:83:e1:9f:e3:ef:fb:36:86:
32:42:1f:28:f7:c8:bb:e6:7c:46:17:8d:1d:c5:7b:
97:09:18:a7:25:17:27:59:de:3b:bd:fb:ce:19:d5:
71:f2:89:db:42:36:51:4a:bf:ca:35:d2:82:0e:3b:
68:63:b2:20:1b:1a:93:a2:e4:66:90:17:78:18:b0:
73:d4:55:33:fb:e2:f0:8b:dd:f3:0d:8c:fe:03:98:
4c:f5:a0:74:85:43:08:f9:6b:8b:03:37:66:0b:1f:
eb:26:a8:56:bf:66:aa:92:d5:9a:4a:a3:9a:7e:f9:
57:50:4f:36:46:d0:99:29:74:dc:f0:c1:13:7f:a8:
56:1c:e5:5f:2f:13:82:c1:7f:c1:bc:e9:74:d7:dd:
ce:f5:b1:e4:af:20:e3:62:f8:7e:cc:c9:3c:a4:de:
17:a4:5d:d4:ad:cb:67:2e:6b:3d:eb:3a:0f:58:a2:
0b:2f:ed:89:7d:d3:18:e5:5b:a0:f5:2b:86:29:79:
9e:a8:af:1b:29:ff:6c:a3:71:98:95:93:62:c1:97:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AC:1E:E4:80:FB:03:A6:FF:AF:E7:9A:60:E6:6F:1B:2F:33:1B:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48e24096-30ae-351b-8783-2a723de8a961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ec:48:80:21:27:19:8a:2d:d2:0b:43:7c:4a:ed:ac:ce:ec:
69:e3:6c:32:cd:f7:0c:08:c0:fc:b8:ea:e9:68:52:72:35:43:
d5:d1:95:18:ef:dc:6f:b0:75:59:3a:04:3f:70:1d:7e:ac:54:
f5:9e:be:f9:99:0c:67:aa:df:ef:c1:34:4e:9b:95:db:83:dc:
a8:65:12:a3:53:cf:83:d9:41:b2:32:2b:a2:0f:64:40:0d:b8:
5b:1d:18:3e:2b:72:44:6b:c5:a8:95:ec:1a:f0:98:79:67:41:
2d:f4:9a:f9:41:60:ad:09:6f:bc:19:c7:71:4a:0a:73:9f:29:
7e:fa:c8:21:35:a3:7f:26:12:42:9a:68:4f:5d:ab:cd:15:6b:
62:cd:7e:a7:66:d5:70:78:0b:1a:52:af:b0:dd:e8:56:72:ce:
14:ea:52:19:45:19:53:c0:be:4d:6f:d3:7a:e6:c6:c3:95:f2:
86:8c:16:3c:27:b8:8d:a0:d7:e2:18:45:73:ae:1a:b8:51:b5:
39:46:43:9d:7d:67:d4:a1:be:88:42:85:be:43:31:1c:87:a6:
16:9a:cb:e2:2d:5e:d8:2a:be:4a:20:af:14:f7:57:5b:64:d2:
cf:06:bd:78:69:55:39:de:06:cc:90:31:f1:5c:cd:8e:cf:63:
d4:a8:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:22:23 2025 by rpki-client