Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7307c488-c4bf-3b1e-b427-4da8e3125438.roa
File: 7307c488-c4bf-3b1e-b427-4da8e3125438.roa (raw, json)
Hash identifier: cbgum5HpOcttBOQ6iS85OqoyA7fbIsRJtDwNrGW4roI=
Subject key identifier: D1:5D:E8:24:90:86:AF:EE:2B:9E:D3:C4:1A:3F:46:CC:DB:F7:9C:92
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A00D9923B5012CF18E07EC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7307c488-c4bf-3b1e-b427-4da8e3125438.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.148.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:00:d9:92:3b:50:12:cf:18:e0:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4baf3ffb-b06a-475e-b84c-51d0e5ed5221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ae:7e:d1:fa:1d:32:d2:bc:da:f5:d8:cd:40:
46:53:91:10:28:81:35:06:66:74:e7:e3:73:72:4b:
53:8a:2a:94:06:34:a9:53:88:4f:98:81:72:b7:7e:
8a:c7:aa:a8:1e:82:5d:82:56:51:c4:b3:31:84:1c:
b5:e9:c1:b8:3e:68:61:df:1d:77:5e:b3:cc:a5:41:
f0:49:1a:f2:8a:25:97:84:1d:86:09:a1:1d:f8:0b:
c7:a0:a0:c3:cf:6c:a7:d6:da:f4:c1:b9:50:58:e7:
42:cc:9a:90:5b:4d:da:2a:71:7a:e7:13:55:75:a8:
ce:17:c5:a5:4f:cf:fc:96:fd:ee:5c:36:31:4a:fc:
7a:13:f6:c5:79:13:b3:51:de:89:6c:c0:25:42:28:
32:0a:82:70:7c:51:68:c0:4d:19:e3:cf:64:2a:ee:
57:5e:6a:9e:3a:a1:6e:ca:e2:f6:d3:d7:60:3c:67:
0f:25:a6:9f:1a:bf:bc:c3:a8:a5:df:85:54:11:88:
2f:17:94:1d:59:e1:74:7c:b0:7f:ed:3b:c6:53:c0:
5c:0a:71:68:34:50:d7:e5:69:a7:f6:17:7d:33:a5:
ba:ea:43:d2:b8:ed:8a:6a:bb:dc:5b:84:49:f4:9b:
d9:bd:7d:98:fc:d7:3d:a8:2b:eb:00:78:2f:04:43:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5D:E8:24:90:86:AF:EE:2B:9E:D3:C4:1A:3F:46:CC:DB:F7:9C:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7307c488-c4bf-3b1e-b427-4da8e3125438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.148.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:3f:0c:00:b1:6c:b5:78:b7:fe:c2:b0:ce:51:04:5c:5b:e2:
c0:f9:1f:1d:1c:89:db:0f:82:dc:39:06:11:40:0f:6c:16:52:
f4:fb:e4:7b:b7:18:8d:92:bf:4a:ad:c3:14:21:90:b6:91:f1:
8e:46:53:08:cf:66:ea:53:2e:16:f9:26:34:53:17:04:bd:09:
a8:ca:88:c4:df:77:a3:89:cd:12:9e:dc:31:11:9e:c2:1e:c1:
98:08:31:dd:b6:cb:b8:0c:d1:80:f2:c8:34:4c:f7:57:28:29:
72:ad:25:83:f4:1c:bc:6d:c5:41:a0:ce:81:5b:8d:e6:39:41:
37:eb:fb:14:5f:d0:a5:65:07:de:be:15:20:34:2d:0c:5e:c7:
80:e4:43:0e:2b:15:53:d2:54:96:27:39:ba:50:ee:a4:c8:8e:
af:0d:c0:92:36:95:38:62:23:3c:5d:55:f7:67:0c:9f:50:12:
32:ff:05:db:78:d7:8c:5f:88:7f:26:ec:e1:fd:95:70:85:aa:
4a:c9:52:09:33:19:78:48:02:19:f6:74:02:55:54:29:5a:d9:
6d:68:c3:44:3e:b4:4e:22:fa:9c:a0:0d:fa:80:9b:dd:b1:11:
79:40:b3:6a:39:3b:f9:bd:f2:25:c2:f3:10:ce:4a:68:60:59:
71:53:32:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:37:48 2025 by rpki-client