Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ad234fa-bb58-3659-93a3-7cf356f126de.roa
File: 6ad234fa-bb58-3659-93a3-7cf356f126de.roa (raw, json)
Hash identifier: 1k7JIfQXgoRtVrLAYxIzFNXFbrUxwlnPMsB0+tzg+IY=
Subject key identifier: 6D:A4:AC:97:0F:3A:F0:8A:24:CB:97:2D:AB:D4:AE:73:1F:A6:98:FC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A054CD2FF08C0B6C62B9700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ad234fa-bb58-3659-93a3-7cf356f126de.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.137.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:4c:d2:ff:08:c0:b6:c6:2b:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=43010cfc-64fb-4d55-93f7-0d48589232c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:f5:86:ea:16:44:67:6c:ce:a2:3b:d1:94:
1c:7f:d9:99:7f:16:25:69:18:65:09:c8:58:5b:15:
e6:2a:05:70:63:54:56:f0:d8:e9:da:c3:a0:93:98:
4d:6a:7b:4d:f3:43:49:70:73:28:19:d7:fd:b2:5e:
19:58:5e:0f:5d:62:fe:91:3c:b9:db:66:11:42:b1:
9a:80:35:59:6e:ec:ef:78:61:6b:40:46:55:df:88:
39:2e:7b:e4:5c:3a:1c:45:87:05:98:26:6f:e0:54:
bf:d2:9a:fe:92:97:c1:ff:c9:b3:24:01:97:0e:59:
65:e0:d6:9b:54:e2:f5:3c:13:aa:8d:6f:99:49:ae:
a7:9b:67:43:01:fc:85:84:9c:f6:ee:ca:ec:5b:60:
92:e8:08:bc:c1:a0:c9:f6:78:7f:77:a3:2a:fd:29:
86:d7:be:71:f6:c5:9c:fe:b5:9a:1f:7c:37:64:25:
65:81:a8:b5:10:fa:ba:02:80:51:7d:89:fe:77:b5:
eb:8c:c7:0b:bf:8d:b0:92:5f:72:8c:cd:9c:8c:cb:
f7:b3:d4:2b:fe:5a:bd:cf:9b:3e:25:85:44:ce:a3:
de:c2:08:46:74:51:cf:74:b8:ea:55:55:75:ea:a2:
03:62:88:df:4f:1d:81:f9:27:b9:78:87:d0:d0:00:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A4:AC:97:0F:3A:F0:8A:24:CB:97:2D:AB:D4:AE:73:1F:A6:98:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ad234fa-bb58-3659-93a3-7cf356f126de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:20:74:94:8a:e4:bd:41:c6:c5:08:78:cd:08:7c:da:01:83:
31:ec:3a:b4:54:bc:df:19:3e:56:4a:f1:b6:80:8a:12:44:1e:
b4:46:a9:89:ae:b3:d1:2e:a4:5a:29:1a:11:7c:2c:4c:b4:0f:
39:09:95:60:2c:55:0f:3f:7b:1f:de:64:0f:21:01:81:50:c2:
6e:e6:72:e3:b8:38:00:fc:a1:4b:b3:ea:dc:04:18:ca:6f:7e:
94:b4:59:6c:c5:2a:6c:9c:af:bd:47:89:ec:d0:2c:99:ad:be:
3a:e5:50:51:1f:06:65:3e:63:6d:b4:35:71:b6:11:2b:90:5e:
1e:23:7d:bb:d8:51:25:9e:4d:ee:35:f1:12:bf:0f:40:03:31:
d2:e1:27:7a:42:41:5c:9f:82:37:14:c4:fb:a8:b7:d6:58:a9:
9f:a3:b6:fc:4a:86:b5:92:29:38:8f:1a:3a:4a:8b:95:0d:7b:
e3:0e:e4:3a:62:f3:3c:7e:2b:a6:4b:24:cb:54:30:a7:a2:7a:
f3:46:de:6b:f8:c2:bf:9b:13:bf:37:c9:d5:50:33:b1:ff:7e:
01:0f:fa:00:26:3d:8d:42:77:a0:8f:7a:36:3e:e8:f4:15:0d:
c1:57:f2:1c:e0:1b:77:3d:47:88:5e:5c:9a:aa:da:2b:30:18:
06:a0:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:11:16 2025 by rpki-client