Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/523124c0-9929-3394-b4cf-34cc9980a158.roa
File: 523124c0-9929-3394-b4cf-34cc9980a158.roa (raw, json)
Hash identifier: lCp0XcI98UVwOUreHSGFwPhUEkhGPftIc/EfLTd+jW4=
Subject key identifier: 76:E9:3B:66:70:29:F0:75:A3:4D:02:68:5F:7F:C4:62:6F:8F:56:9C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A736FF407B23968169600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/523124c0-9929-3394-b4cf-34cc9980a158.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.135.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:73:6f:f4:07:b2:39:68:16:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=ea7c9873-c3b1-456c-863f-86945d84ce98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:a3:15:9e:0d:ee:74:38:5e:bc:b9:85:ab:
15:79:39:44:e5:08:09:a6:d2:f8:20:79:39:f9:fc:
54:b0:fc:37:ee:83:58:06:a6:40:56:b2:6f:5a:dd:
12:e6:14:fa:4f:f1:79:f8:d8:4d:90:92:07:b1:10:
6e:76:0f:01:38:58:9e:41:39:dc:84:5f:f2:53:49:
59:74:57:9d:ba:36:cf:db:25:72:13:33:cd:94:2a:
41:af:90:0b:91:06:25:2a:59:8d:53:f6:11:cb:a4:
f3:86:2a:2c:08:94:f2:80:97:72:05:91:37:b0:96:
36:4a:c7:91:99:97:6d:6e:89:57:92:88:6d:9a:5e:
26:df:26:0a:96:05:08:3c:49:45:9a:37:f7:e3:13:
74:f2:65:66:87:8e:86:88:1a:e5:d6:a6:72:ba:5b:
20:d8:d2:fb:3b:32:50:d4:de:8e:e8:e6:03:9e:fa:
fd:9a:cb:3b:7d:29:ad:41:43:eb:fe:38:6f:68:09:
28:89:1a:a5:5d:35:7c:ef:6c:a8:38:8e:0b:4c:11:
c5:0e:93:c7:55:b2:d6:6f:63:e5:dd:4e:ac:fe:c7:
e4:16:f4:ea:81:ba:a4:8e:33:72:2b:5d:cf:db:30:
d0:c0:18:59:c7:1d:c3:73:7d:3c:12:e7:44:f0:49:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:3B:66:70:29:F0:75:A3:4D:02:68:5F:7F:C4:62:6F:8F:56:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/523124c0-9929-3394-b4cf-34cc9980a158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:31:64:1d:5d:78:47:a3:26:15:e0:c7:6e:8f:c1:91:5e:13:
db:a4:1b:76:d5:39:e1:62:e8:95:4d:c6:44:48:ab:3a:7d:02:
cc:ad:56:8a:cc:f6:90:d4:b2:82:19:42:a2:e1:3d:a3:bb:78:
89:32:b9:eb:9e:3d:95:c3:4c:5f:c7:d2:8d:16:7b:4d:0c:71:
e3:ab:7a:c2:97:28:3e:56:e5:69:79:52:85:02:ec:bf:19:2e:
b3:1e:76:cb:1f:e7:aa:cc:c6:f7:51:65:9c:ac:a9:c1:64:4d:
bc:44:12:88:3b:5b:5c:6a:df:10:09:09:a6:66:f0:b5:c9:a1:
4b:f1:7c:1a:5a:f0:f9:d4:a4:a6:f5:ad:90:e1:20:5c:cb:03:
26:de:9f:91:9c:87:b0:87:63:cc:5e:9c:3d:ec:af:34:e7:32:
14:6f:93:b2:cb:1e:72:fb:38:11:08:a8:47:d3:5d:a6:8c:65:
ff:42:e3:3f:1b:83:45:f4:8c:3e:c0:8f:e4:45:f2:9e:a3:25:
2c:6c:8c:41:82:c1:6a:63:48:0a:4f:0f:92:b7:78:47:7c:cc:
c9:e7:91:34:4b:e1:a7:c1:8e:99:c6:13:97:18:d6:cd:69:27:
ac:13:02:ea:af:d6:a4:12:8c:81:98:af:c0:67:db:37:ea:06:
6a:80:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:29:29 2025 by rpki-client