Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc1b357-c9b6-3c65-a0f5-097b4fca99b2.roa
File: 6dc1b357-c9b6-3c65-a0f5-097b4fca99b2.roa (raw, json)
Hash identifier: kyPQ+rVU6PFsvYiWdqEFicm0l3/u+uURu8+KQbHwlPY=
Subject key identifier: E5:6A:DF:25:13:7A:63:80:3A:2A:ED:EB:34:22:DB:AB:85:69:50:74
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583A6A286B01A66A8FEA1A92B340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc1b357-c9b6-3c65-a0f5-097b4fca99b2.roa
Signing time: Mon 28 Jun 2021 04:00:00 +0000
ROA not before: Mon 28 Jun 2021 04:00:00 +0000
ROA not after: Sat 30 Sep 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.156.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:6a:28:6b:01:a6:6a:8f:ea:1a:92:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 28 04:00:00 2021 GMT
Not After : Sep 30 04:00:00 2023 GMT
Subject: CN=427e242d-33b2-4caf-b38b-f96563e9d080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:6c:84:24:05:ca:bf:a8:80:8d:63:51:e9:
44:85:26:08:16:0a:03:0e:76:9e:70:82:ee:ef:b8:
b4:80:c3:6e:2a:2f:e4:10:62:fe:b4:3a:c6:ba:33:
fb:31:bc:ea:26:93:0e:b1:2b:9d:1f:db:ef:82:53:
d3:d8:9b:0a:c4:03:f4:e8:1d:1d:0a:d9:17:15:8c:
2c:b5:74:32:10:b5:41:86:c3:18:57:c1:84:55:ad:
d0:d4:1b:f9:cf:0e:a5:38:e3:d4:99:c7:4b:cb:2a:
ea:f6:91:63:10:15:c3:c1:2a:28:04:00:25:30:62:
8d:e9:74:4c:5b:69:d5:04:96:0a:e5:11:05:8e:a3:
a5:b8:92:44:b7:80:82:ab:5b:1c:82:16:8c:3a:f8:
c9:19:50:11:68:18:87:15:44:42:20:5d:12:2c:31:
9c:b0:57:d9:b3:74:3b:dc:9e:f4:48:6b:c3:84:62:
46:93:df:2b:56:81:a9:df:33:82:c2:f9:1e:46:81:
26:ab:1c:09:63:5d:e8:e8:c8:90:56:b2:73:31:dc:
0e:4b:2c:a4:86:16:fb:96:11:dd:28:bf:e2:b1:85:
df:55:ad:c6:61:f3:92:d7:b3:e1:48:2b:ed:38:be:
5a:3d:19:7c:d8:ab:2d:3c:68:8e:29:e5:a8:8d:e6:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6A:DF:25:13:7A:63:80:3A:2A:ED:EB:34:22:DB:AB:85:69:50:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc1b357-c9b6-3c65-a0f5-097b4fca99b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:8f:83:d5:46:eb:49:89:84:da:cc:ec:2b:08:e3:f0:ab:9c:
e9:ce:88:d0:47:01:55:34:61:2d:ff:76:75:f0:dc:1b:63:cb:
47:5a:84:f5:a4:7d:b0:ca:6f:ad:49:19:20:99:9c:ab:a0:de:
d8:ef:bd:61:5a:b4:b3:ae:8b:82:95:0a:43:49:93:62:89:d0:
b8:9a:9d:1f:ee:14:9c:21:1f:54:5e:43:5e:e3:83:0a:aa:77:
19:50:3f:e7:69:71:15:23:3b:4d:f4:28:2e:96:23:29:12:c5:
d9:60:b6:21:e8:b8:4e:5e:55:18:34:96:5f:a4:e6:04:b5:c9:
ab:2e:1a:50:c4:2e:7e:a7:29:6e:5d:56:5b:5d:60:d4:e5:c1:
19:79:2c:35:a8:16:6e:18:f5:b9:01:be:d9:44:e2:73:40:06:
67:1d:4a:d8:08:b6:a9:3d:75:20:c8:d0:11:c4:c9:11:27:91:
21:53:99:26:3c:81:82:95:fc:61:1a:af:53:32:66:c2:f0:e0:
2e:52:5a:61:97:1b:e5:d1:05:22:f5:5c:dc:bb:0f:5c:90:b9:
8b:5d:b4:23:fe:1e:88:97:33:04:7f:e9:27:55:57:c6:99:d3:
86:9c:a7:84:e1:bf:23:e5:f0:ad:5b:d3:b9:42:b9:0e:cd:4d:
86:28:50:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:41:31 2025 by rpki-client