Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76fb8695-e877-385f-9e3e-248302ebdd52.roa
File: 76fb8695-e877-385f-9e3e-248302ebdd52.roa (raw, json)
Hash identifier: nvdT3A3wxwGHCqLpC6p5hZnvciyJjIXX+yE8kNNyA6I=
Subject key identifier: 29:BC:D0:4F:0D:B3:60:90:1E:33:BA:BF:08:EA:7B:D5:0D:DD:B0:94
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1ACB725428A5727B3B1252
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76fb8695-e877-385f-9e3e-248302ebdd52.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.89.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1a:cb:72:54:28:a5:72:7b:3b:12:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=98b5cf62-3fe9-4c3e-b5b4-703469302882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:2a:95:c6:cd:f7:6a:d6:7e:9d:fb:4d:e2:
24:02:5b:70:cb:34:d8:fe:83:67:a1:47:c2:b6:dd:
ef:f1:6e:99:31:b7:87:8c:ba:cd:f4:4b:d5:18:3c:
35:20:dc:ba:75:08:be:7f:1a:4d:0a:54:60:97:5c:
2c:e4:53:24:40:ec:f7:04:58:f8:ec:23:9f:a3:5f:
eb:3c:33:f1:9f:17:ef:2c:0c:0f:95:42:c1:05:b4:
ae:2f:89:40:0f:f9:14:dd:50:e1:18:43:bb:47:32:
e7:a4:cb:bd:60:3a:a3:3a:7e:de:7f:4d:7f:7a:ba:
e7:5f:4a:e5:06:ff:06:5e:ea:a1:7b:25:44:43:2b:
a0:4d:f1:5f:be:8f:c7:2e:dc:20:45:13:00:65:e8:
2d:c7:25:a7:0b:7c:6a:e5:5c:d6:d3:a0:ba:03:c3:
88:f5:7e:83:75:16:c0:3a:45:f0:e1:d2:de:a8:c7:
93:d8:3e:32:f4:d1:42:1d:cf:66:16:6d:3b:b4:f5:
ec:dc:29:14:f0:ea:52:3b:00:50:24:2e:19:5c:ac:
c7:32:a4:af:f1:5c:c4:8a:27:92:47:1a:fa:2e:f0:
02:31:fd:05:91:e1:7c:27:87:0d:70:82:a9:34:d0:
18:3e:2b:8c:01:5a:de:33:a9:16:7c:c6:cf:54:2d:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:D0:4F:0D:B3:60:90:1E:33:BA:BF:08:EA:7B:D5:0D:DD:B0:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76fb8695-e877-385f-9e3e-248302ebdd52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:9a:d9:fe:14:96:ce:42:ef:bb:42:8b:ef:cd:82:9f:da:51:
37:e9:cd:e8:d1:2a:43:3c:12:82:03:f9:b6:eb:57:db:86:79:
0d:5a:e1:b9:d4:aa:1b:32:08:27:ce:41:91:c8:23:8e:4d:f3:
66:4c:42:38:55:3e:a7:14:4e:b8:63:5f:f2:67:41:a9:b9:b1:
47:c6:8b:75:1b:ca:12:56:78:8e:05:2f:90:fd:6e:b7:14:fa:
f2:7b:99:a9:a0:14:36:cb:26:57:6c:e0:8f:c6:b3:f1:bc:1b:
75:19:ff:55:75:97:c5:59:5f:91:53:8b:d6:84:b6:bb:69:53:
e6:a7:6d:ce:e9:bb:35:15:e0:c2:8f:73:64:56:92:bb:51:a9:
a7:02:66:05:00:6c:9a:84:c2:f1:ff:6c:44:4c:d9:be:1a:f3:
fd:11:f3:3a:cc:85:1f:db:88:76:67:e8:3c:a6:a2:d4:cb:26:
e0:e4:ea:2f:93:c5:82:52:38:7e:b3:f8:83:51:05:e2:c2:49:
35:43:a7:13:f5:20:d1:d2:be:ba:97:cd:54:4e:ea:a7:6b:df:
5a:7b:d1:29:b2:ae:b4:54:7d:96:82:3a:0f:db:97:23:cb:d7:
51:a9:de:54:c2:f3:82:c8:87:a1:4e:69:fd:03:07:98:97:da:
73:ba:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:55:04 2025 by rpki-client