Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ad49bbf-d32c-3e9c-88e9-e4a3f5f88c91.roa
File: 7ad49bbf-d32c-3e9c-88e9-e4a3f5f88c91.roa (raw, json)
Hash identifier: NrlmC8rkLmu6ie1AEoxoz0h9QKcEoiVBZnhl3r+ReTY=
Subject key identifier: B1:73:EC:4E:7F:C6:30:C7:08:37:54:08:7E:B7:8E:B9:01:46:B3:0C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F52A6C2B999C6B12EFF0A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ad49bbf-d32c-3e9c-88e9-e4a3f5f88c91.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.78.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f5:2a:6c:2b:99:9c:6b:12:ef:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=afaadd36-2c79-474c-b9f9-abef645bca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:ab:b6:a2:aa:3e:b8:d0:53:8f:f1:2e:79:
6f:e4:8f:3c:e8:ee:05:c1:ee:b5:df:2a:11:1b:d7:
fb:1d:3a:cd:bc:36:c7:20:c4:a6:18:41:8e:11:95:
36:6e:48:3b:a8:c7:82:17:0c:94:af:e2:b1:c5:d6:
37:56:15:4d:c2:55:ab:0c:c3:8d:27:59:eb:5f:22:
70:b1:29:99:7e:e6:b5:dd:23:e2:3d:7b:79:7b:68:
bc:49:67:3e:82:13:d9:cf:bc:6a:de:05:7c:46:5b:
76:ab:04:1d:af:19:1d:d7:1e:3d:ff:ed:10:c0:de:
0d:01:02:80:77:a8:02:f4:87:18:8a:13:f9:8b:b4:
96:71:84:cb:14:9b:96:61:48:54:6d:02:75:53:78:
73:cc:46:1f:56:95:c7:07:63:6b:a5:6d:bf:68:5a:
8e:c2:3c:52:fb:95:cd:73:22:47:41:c1:13:a0:9f:
2d:ce:8e:08:18:e8:80:74:4e:8b:34:41:fd:86:9f:
10:78:39:32:1d:b7:26:0b:a3:6e:52:6f:aa:b8:3d:
30:07:29:85:12:46:79:06:8e:e9:fc:f4:f3:22:a3:
08:c3:b3:19:12:20:f2:ab:52:1e:21:1d:e7:40:4b:
4d:2b:2f:7c:da:cb:52:d6:ec:a4:ae:f6:8f:6f:d5:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:EC:4E:7F:C6:30:C7:08:37:54:08:7E:B7:8E:B9:01:46:B3:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ad49bbf-d32c-3e9c-88e9-e4a3f5f88c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.78.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:78:13:76:a8:d0:85:00:9b:d1:02:7f:c2:96:b0:de:32:ec:
74:33:57:bb:f8:73:d3:69:f0:aa:c4:c3:fa:06:9c:b9:8d:99:
51:f1:b8:ee:a4:0d:41:66:45:01:8a:04:22:4c:32:e0:6d:d5:
bc:c9:3d:43:44:23:98:e1:2d:92:7e:3c:c8:98:ac:33:b4:8e:
c9:c1:7c:89:2e:71:26:82:21:24:d6:0f:38:a0:82:27:78:75:
8c:44:f7:18:c2:09:49:c3:3d:25:f3:8b:b5:db:a0:c3:bd:15:
6e:40:8a:95:d5:24:f8:14:06:f6:c6:18:40:c6:89:7d:ba:af:
50:84:4e:02:bf:6f:63:ab:d4:3c:d4:28:3a:08:64:e3:b1:06:
7a:ff:d9:bc:a5:24:57:60:7f:39:4d:02:43:b6:4d:81:af:04:
5a:a6:ea:09:6f:3e:aa:af:a5:37:4a:c5:94:5c:46:27:52:a6:
6b:88:27:8d:eb:cb:9a:b8:cd:4e:eb:81:28:c4:15:0b:12:29:
af:bd:d6:7d:64:e8:00:e7:26:07:cc:b8:35:9c:6c:7b:2d:95:
95:90:d2:e8:92:65:ed:11:2e:16:a3:a6:a5:3f:e4:6f:68:5b:
06:1a:2a:a2:2c:a2:9c:22:02:75:30:42:d1:a2:49:a9:6b:b3:
3e:91:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:03:27 2025 by rpki-client