Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7bf9a395-1e92-3c48-84ce-3bef963d2eac.roa
File: 7bf9a395-1e92-3c48-84ce-3bef963d2eac.roa (raw, json)
Hash identifier: Q/z0tl66AsObVYKOEsYE3vnUPPUV3AzVeFsjYYpdy7w=
Subject key identifier: D6:1D:86:DE:C9:33:45:2B:B2:DE:05:EF:F1:00:17:30:52:78:76:E7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1DDC2016EBDF1638312600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7bf9a395-1e92-3c48-84ce-3bef963d2eac.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.133.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:dc:20:16:eb:df:16:38:31:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=df24f884-72d4-461d-8fdb-52bad7dae264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:e7:65:e4:29:a6:85:e5:90:71:ea:33:cf:
6b:58:2a:a4:01:86:6a:ef:67:55:23:51:a9:bf:09:
5d:c6:9d:da:0b:5a:17:e6:6c:1f:c9:22:21:3d:27:
54:ae:53:6d:5d:46:cc:a9:b5:7e:97:57:15:ed:77:
55:67:82:e2:7b:f3:b3:dc:db:75:20:76:ef:2e:6f:
06:40:19:40:b0:f9:40:e8:aa:ca:b3:dd:24:03:2d:
0d:3e:1f:5b:9e:0d:e3:0c:95:7b:d6:66:45:e6:ec:
7d:a6:48:dd:d8:e7:26:1e:8c:dd:da:e0:f4:78:58:
ac:bd:7c:96:cc:96:36:70:f1:ff:c7:f7:c7:59:8c:
de:39:73:84:32:3b:fe:9c:9f:7a:ab:34:63:de:aa:
9e:cd:5e:ad:6c:22:1c:80:c2:2e:f3:8a:dc:9f:b5:
20:88:a5:03:54:d4:dc:74:99:06:1a:eb:eb:7f:de:
35:e6:fa:b6:cd:d8:43:f2:f9:6f:6d:69:1e:1a:c6:
5e:b4:e5:e6:8f:6e:f1:54:e0:17:18:ea:48:e3:9b:
61:1e:f0:ad:8e:2c:e9:2a:05:d8:5b:2e:52:c1:87:
5e:df:90:a8:e4:e2:1c:a8:26:d8:62:a4:9a:c8:77:
80:1e:87:b5:12:f0:43:47:89:f3:84:d0:5e:44:40:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:86:DE:C9:33:45:2B:B2:DE:05:EF:F1:00:17:30:52:78:76:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7bf9a395-1e92-3c48-84ce-3bef963d2eac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.133.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d0:28:e4:38:d6:62:da:8e:e3:37:c1:14:25:eb:f1:42:88:
18:8f:d2:85:cb:5a:6f:f1:d7:22:65:0e:de:ce:e8:ce:ba:65:
75:3c:ae:70:de:5f:08:19:02:22:08:c5:51:56:af:41:1c:0d:
ec:8a:5f:82:80:58:72:fd:09:46:de:68:e5:af:95:58:89:44:
c6:d3:22:b4:d4:98:47:62:d5:91:87:bc:d1:97:4d:d9:05:9c:
0b:bc:6a:b3:10:32:01:d5:51:c3:cc:39:6a:0b:ea:6b:40:f1:
0b:bf:3b:5d:eb:ba:4f:eb:89:30:7a:62:3f:55:84:34:30:d4:
b7:92:11:d7:7c:b8:e9:b8:71:69:26:9b:c9:ae:14:7a:f4:88:
4e:dc:f7:2d:14:50:f5:4e:e0:d3:5e:98:aa:8a:f4:f4:3c:6c:
5d:98:a1:f5:f0:d8:5f:10:fa:c0:4f:26:cc:03:fc:0d:15:86:
68:9f:7c:55:de:ec:b2:fe:b8:fc:66:34:ee:c9:98:de:23:d7:
53:14:7a:ab:42:78:25:72:ed:40:f7:5d:80:64:cc:83:de:43:
0b:03:c6:49:af:e4:e8:ba:67:b9:48:35:36:eb:8f:6f:16:63:
e2:e0:c1:27:37:6d:bf:6d:76:56:0d:5c:fe:09:ea:3b:91:40:
98:98:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:10:35 2025 by rpki-client