Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d5e0b98-4aca-3102-9e66-c242deab4747.roa
File: 5d5e0b98-4aca-3102-9e66-c242deab4747.roa (raw, json)
Hash identifier: dDGskKSzl4RQNEmtLtxJ9+HSR3kFHJy3+QfGHNIS5OY=
Subject key identifier: C8:9D:95:41:76:FE:2B:A0:D4:0E:4D:C1:4D:3F:A0:00:13:FE:5E:E6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0D9AF262CEFE689E1DDC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d5e0b98-4aca-3102-9e66-c242deab4747.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.108.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0d:9a:f2:62:ce:fe:68:9e:1d:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bcfe1028-955d-4d9f-b0c0-caf9bd9b4684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:0a:c2:80:f3:0d:68:32:57:10:69:25:10:
3a:e4:ca:cf:fe:f6:49:00:34:8a:83:28:c0:8e:25:
5b:98:f7:71:c9:53:1b:3a:74:34:2b:6e:a7:76:7d:
67:1d:9f:31:a0:b9:8f:75:bf:dc:33:b7:6c:09:13:
32:e3:85:55:31:8f:e3:45:9a:6f:f7:68:97:ed:60:
38:5f:e9:c1:04:b0:9a:5c:8f:26:29:c4:0a:27:54:
9d:69:57:94:75:9c:83:0b:80:8a:df:87:00:b3:b7:
42:1f:9d:90:01:1b:c0:f9:56:da:4e:98:45:13:d6:
c1:13:cf:c8:4e:31:b0:12:a4:83:09:c0:90:1a:e5:
cc:c0:c8:b7:09:53:2a:15:f9:60:ba:ed:0e:1f:d8:
d0:e8:d4:3b:75:d1:f8:b9:0d:73:0f:14:9d:2b:70:
13:24:17:d0:c2:6f:28:7e:9f:21:23:4a:d5:1b:ec:
38:2d:60:8d:bd:d6:50:e6:0e:e3:17:90:da:68:3e:
85:7c:db:91:43:be:67:96:0f:d6:53:46:43:b4:14:
80:2d:b4:84:2b:d8:75:ba:8b:e6:7f:22:b3:4c:56:
a5:ab:68:61:b3:97:62:19:cb:39:eb:e2:0e:f6:e2:
8b:84:d8:bc:69:f4:4f:5b:5d:30:83:7c:98:fa:ee:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:95:41:76:FE:2B:A0:D4:0E:4D:C1:4D:3F:A0:00:13:FE:5E:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d5e0b98-4aca-3102-9e66-c242deab4747.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.108.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:2a:4e:67:50:62:66:7f:81:7a:e4:4a:32:8c:a7:97:80:5a:
13:20:16:3c:a4:af:10:3f:9e:a1:f9:db:39:4e:f6:77:1b:3c:
f3:ab:0d:c5:8f:ed:aa:b6:d1:40:a3:c0:ae:7c:e5:18:a6:23:
f8:b3:08:27:eb:58:2d:0d:e0:2e:aa:02:e2:62:9d:07:df:52:
16:27:ad:0a:4c:84:7a:be:84:e9:9c:3c:26:6e:4a:91:83:d9:
83:96:fa:53:5e:dc:b2:27:63:7a:1a:a2:3c:ba:18:bb:78:8f:
ac:db:92:cb:2b:77:37:ca:14:e9:b0:a1:bb:1f:9f:20:bd:19:
f5:2d:6f:74:3e:a3:70:cd:f2:88:33:d8:1e:18:c0:27:a0:46:
82:35:56:86:73:0e:be:50:c4:91:92:ac:ca:8b:1b:08:26:5a:
e5:43:3f:9e:a4:cd:c6:7c:1e:c5:f1:42:51:af:b9:fc:dc:d4:
11:34:de:c5:12:3d:b6:a8:9a:28:86:ec:de:91:0f:4f:b2:33:
b2:e7:ca:15:1b:47:41:b7:24:ef:eb:27:57:e2:f5:04:d0:38:
9e:92:3b:5f:cf:47:6c:c8:e1:79:d2:e5:95:b1:3b:c7:9e:49:
b2:8d:c1:a2:ef:5b:0f:79:59:d7:90:78:b9:4e:2f:08:95:50:
8c:14:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:58:53 2025 by rpki-client