Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7775bc80-4c59-3a1e-be1f-4f2053f0091f.roa
File: 7775bc80-4c59-3a1e-be1f-4f2053f0091f.roa (raw, json)
Hash identifier: QgQFGFtL6j2BGSdCDyhwRmUagFKdVCwbh/UR8zbY4sE=
Subject key identifier: FE:3D:40:1E:38:85:C1:8F:E1:93:CD:97:2C:BD:B2:09:7E:E6:F6:9C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F2F98FD5C3A7E807CCA340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7775bc80-4c59-3a1e-be1f-4f2053f0091f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.101.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f2:f9:8f:d5:c3:a7:e8:07:cc:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=add4185b-81ad-47a8-817c-d8ac24797eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:b0:13:2c:97:57:3e:4c:a6:fa:2e:92:13:
e9:d4:f0:fb:e6:75:c0:32:3b:41:d1:02:50:1e:8c:
7e:2a:4d:be:97:23:99:d4:ce:be:da:b7:7d:17:9d:
b5:1a:81:0c:c4:f4:5d:51:8e:6f:fe:4a:4a:ec:5f:
cd:9d:85:34:94:3c:c0:fe:b9:b3:1c:c2:03:79:64:
79:20:f2:99:3e:66:bd:f1:b1:72:5f:7e:cc:74:32:
10:38:3e:06:22:83:3e:d1:00:ed:01:6d:87:6d:00:
5c:49:de:44:ce:c6:ea:c5:49:68:97:d2:17:26:48:
81:95:d4:4d:e0:69:f7:a8:b8:b7:78:58:2b:9a:96:
63:9b:3e:f5:b1:00:cf:9f:cf:ad:83:eb:65:00:94:
e6:20:89:f1:73:ac:de:13:83:e9:f0:20:9e:bd:03:
0b:6c:ea:9d:f3:fd:ba:54:e6:b0:3f:77:21:e7:d2:
c7:43:07:f1:2c:80:7b:36:ed:8a:15:0c:5a:af:18:
e0:1b:83:e2:76:e3:b3:29:a1:8e:60:de:30:47:68:
75:2d:49:aa:54:b4:55:a6:83:12:f9:46:66:70:a6:
56:45:96:f1:b5:67:7f:e7:23:f2:7a:18:b8:02:32:
60:d1:97:6d:6b:4d:c0:53:e2:20:e4:b0:a8:5f:2f:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:40:1E:38:85:C1:8F:E1:93:CD:97:2C:BD:B2:09:7E:E6:F6:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7775bc80-4c59-3a1e-be1f-4f2053f0091f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.101.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:8e:5b:09:46:5d:0e:d7:c9:5b:16:19:d6:2a:02:35:21:1d:
d5:3b:d5:e2:10:37:4c:0b:f8:ca:21:f2:8d:e4:a3:38:b7:a1:
53:83:51:f0:0e:7d:7b:b9:ed:08:d5:15:ca:bc:c1:cb:61:a3:
fc:9c:05:1c:85:82:45:15:90:2c:21:02:25:7b:63:60:7e:bb:
da:1e:f0:42:dc:75:46:9d:eb:da:f3:88:26:4c:fe:40:63:e3:
08:4f:74:8b:29:eb:1b:94:db:04:8e:e5:1a:ab:6f:fe:47:33:
32:7c:c7:99:ac:35:ba:98:7e:cc:5d:fc:52:83:9f:0d:44:d8:
54:4d:a4:a6:6f:9f:7d:ca:0d:35:a2:d1:7b:62:3c:27:7d:09:
45:81:ee:ad:ba:70:12:b2:6b:b3:fd:8c:a0:ec:48:3a:e2:95:
1b:ea:1b:0e:3b:09:63:45:c9:3b:2e:73:a5:ad:24:fb:36:0b:
fb:93:bd:88:4c:aa:fe:fe:3b:39:5e:d5:75:fd:e8:85:33:48:
76:5b:7c:88:6d:b7:e8:11:7f:b4:25:d4:b7:72:a7:87:a4:91:
73:1e:0d:11:37:35:08:40:13:fb:7d:85:13:24:f8:17:bc:8d:
6d:60:1e:5d:e4:27:46:4f:09:eb:f3:55:31:2c:9b:5a:91:d3:
50:82:ef:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:56:28 2025 by rpki-client