Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7763a488-7db7-3e5f-8b5b-6bb52652c125.roa
File: 7763a488-7db7-3e5f-8b5b-6bb52652c125.roa (raw, json)
Hash identifier: 1FowM7ek6UKPzl3I+fk2UGGloolRS8xkVR2BHQKmKDU=
Subject key identifier: D8:A7:42:24:A1:02:FB:F6:20:36:F0:61:B4:5C:82:8F:E3:CB:38:6E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0684976E188B46D93A937F
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7763a488-7db7-3e5f-8b5b-6bb52652c125.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.67.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:84:97:6e:18:8b:46:d9:3a:93:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=38061fb2-f239-4f86-a198-ebee1b8bbd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:08:d0:c8:81:35:40:49:23:f8:a9:e5:da:
16:92:20:4d:3a:f1:a8:e4:94:2c:93:59:16:84:c2:
2a:53:be:f8:ca:8b:a5:15:eb:7d:6e:a8:c3:58:d5:
8c:31:f5:b1:cf:fa:d0:a7:87:0d:44:b2:31:d1:70:
dd:ab:a1:50:07:6f:9e:03:78:f5:1a:2b:f7:d6:d2:
68:c6:d1:b4:9f:26:c5:38:6d:51:af:c3:51:f3:9f:
8f:98:dd:68:46:19:54:38:49:79:48:05:8e:b4:41:
68:d8:94:ef:11:64:8a:26:e6:c3:78:f0:40:d1:f3:
3e:d3:68:8c:9b:62:b5:61:b7:b4:27:b8:93:54:ff:
0e:ee:cb:f8:16:10:e7:7c:58:e3:33:8d:92:c3:69:
c6:ad:ec:3b:8f:37:56:0c:75:22:21:67:8e:39:69:
da:f2:91:ff:d4:f1:80:eb:05:99:8a:21:c4:e8:2e:
3e:25:1d:ff:8c:c0:66:4a:a6:50:77:f6:eb:1a:f6:
41:c0:59:f3:31:2e:d7:5c:fa:02:6e:38:38:c0:b1:
c5:45:16:d0:0c:93:99:83:00:92:64:71:83:17:2c:
c9:eb:61:17:d0:d5:a3:81:cc:2e:c4:5c:b9:40:fb:
76:fa:5f:01:08:8a:c1:98:15:27:ac:38:64:e4:1d:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A7:42:24:A1:02:FB:F6:20:36:F0:61:B4:5C:82:8F:E3:CB:38:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7763a488-7db7-3e5f-8b5b-6bb52652c125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.67.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:b6:f8:1f:81:18:4e:56:41:36:72:42:2b:69:a0:63:4d:e8:
ac:e4:74:3e:c4:6c:62:37:92:9f:10:40:3b:25:f2:cc:d3:8f:
b4:e0:8f:31:0b:58:8a:21:a4:4a:02:ee:b2:44:9a:3e:e9:04:
71:5c:fa:c1:61:48:ae:1f:15:23:cd:17:c9:17:99:4f:a7:b2:
df:b5:c9:d8:0b:98:98:7e:03:13:cb:e2:67:ce:d3:db:ed:bb:
3e:89:43:f4:27:fe:6a:ba:e2:50:5f:69:bf:d1:97:32:e6:7a:
58:80:62:53:99:8f:f6:1b:19:29:5b:af:e0:c7:27:bd:13:49:
8a:4c:1c:77:6b:d5:b2:f4:0e:43:bc:5f:f0:e8:54:ee:04:88:
b9:35:78:ed:a7:60:10:12:a8:35:64:62:8c:b1:ff:b6:8d:74:
30:44:16:25:70:2a:e0:3b:e4:7f:9d:80:43:4b:d3:95:19:95:
31:d8:4e:be:90:a9:d7:86:dc:d2:37:e7:cb:02:9e:c3:e3:6c:
9f:7b:ae:01:c4:88:15:6e:eb:c8:90:16:ef:49:70:f1:f5:4c:
ea:95:d3:64:02:a8:66:c8:00:58:31:fe:6b:57:0b:49:8e:df:
c7:f4:66:87:82:fa:2f:c9:74:39:64:d7:d7:3b:34:3e:97:e2:
44:30:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:07:11 2025 by rpki-client