Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/790ccd52-459a-3732-b538-67a136900fd1.roa
File: 790ccd52-459a-3732-b538-67a136900fd1.roa (raw, json)
Hash identifier: WTWHJ9P/2eHfklmmRPPSgAcoZHj/VIY2g0JUjDW+4PU=
Subject key identifier: B5:A8:95:19:8F:79:94:6E:DB:1E:21:A5:5D:41:FB:A2:6A:43:C3:B4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F891966F9EF24BEDC1F880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/790ccd52-459a-3732-b538-67a136900fd1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.87.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:91:96:6f:9e:f2:4b:ed:c1:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9946da29-eb79-4399-aebc-f590797dbe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c0:9c:3f:80:be:6d:1a:b7:b6:f1:40:de:ca:
f4:c9:eb:7c:23:0a:5e:83:d3:27:97:22:78:3e:9f:
d4:5a:61:bc:c6:57:5e:c0:dc:31:e1:dc:fa:41:bf:
c5:44:87:3a:0e:0e:3b:bb:d1:e1:5e:f8:1c:af:8a:
20:04:a2:58:33:49:a1:9a:89:74:af:11:e3:24:4f:
08:8e:28:c2:e5:55:41:2a:e3:af:41:9d:af:5a:b5:
98:10:ff:dc:2a:bb:f0:db:d0:29:d1:03:07:20:a3:
c4:97:14:61:68:ae:80:38:19:c9:0d:b7:33:ad:f0:
06:ec:3d:49:9e:55:76:08:f2:9f:b8:40:5a:9b:fb:
2c:82:37:59:a8:1a:17:ea:8e:89:1a:33:3a:7e:f0:
3a:92:b5:02:fc:d3:b4:f7:a4:d1:8b:7e:5c:14:f9:
41:4e:82:99:e2:65:73:66:e1:9d:93:0f:8b:8c:dc:
01:f1:ec:c4:60:67:e5:38:75:48:38:50:fa:b6:39:
77:18:35:4c:dd:55:57:5d:97:69:1a:bf:85:ce:44:
9a:24:8c:33:7f:19:aa:3d:72:e6:93:7a:02:e3:5b:
ec:62:7e:23:21:18:ec:0d:f0:1b:d8:7a:f9:75:f8:
a7:7b:5f:e6:aa:09:2f:49:3b:95:e5:79:fb:20:8e:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:95:19:8F:79:94:6E:DB:1E:21:A5:5D:41:FB:A2:6A:43:C3:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/790ccd52-459a-3732-b538-67a136900fd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.87.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:34:3d:17:c9:a2:3c:35:c1:50:71:60:2e:bd:ef:f9:47:07:
18:19:f4:9f:17:32:d8:40:1b:ef:ec:00:aa:e9:3d:10:2a:36:
35:7a:92:8c:26:af:51:0b:0b:15:98:1d:6b:d4:aa:b5:b8:55:
a3:82:8b:39:42:be:11:a3:39:64:71:15:e4:2d:66:44:b6:ac:
09:6e:93:60:f4:ec:0d:b5:a0:bf:46:e2:f1:cf:98:6c:6f:60:
89:2e:fe:96:42:35:2e:2c:b2:a9:78:a3:33:df:ac:60:e3:44:
d1:b1:8c:78:40:9f:a2:46:b1:e1:1e:af:4f:c3:6a:4c:ba:76:
20:5f:bf:fc:86:c4:24:a0:19:46:0f:97:58:a4:1f:1a:80:cf:
1e:d6:74:3d:74:6e:5d:59:b4:44:6c:1e:f7:55:b6:d0:33:fa:
66:73:61:20:99:47:c9:d7:55:fc:78:00:a6:40:a5:33:a8:de:
82:36:7c:75:8e:78:c6:b4:81:e3:41:63:4a:c5:98:5f:b1:8d:
5a:3f:a8:2c:ea:d1:27:9a:9f:68:00:a5:f4:c9:4d:69:d6:e1:
6d:4c:7f:96:c0:d7:09:7c:ef:1f:35:57:df:d4:05:2d:08:67:
c8:78:14:c4:56:6d:b9:4d:5f:13:1e:65:a2:ed:c8:72:1d:a4:
d1:30:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:53:28 2025 by rpki-client