Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7dc37673-bdd7-3241-902b-18e81ca65933.roa
File: 7dc37673-bdd7-3241-902b-18e81ca65933.roa (raw, json)
Hash identifier: LB9sOcnV/u8a5j4/7DkEfVgzyDcc+8ktekLe1gohyIc=
Subject key identifier: 8C:A7:AE:25:C4:F7:FB:A6:A4:46:47:E2:5C:1D:7C:BD:AF:5F:65:DA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1E84014DA957BBB8D2ED40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7dc37673-bdd7-3241-902b-18e81ca65933.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.94.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1e:84:01:4d:a9:57:bb:b8:d2:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b149f98b-d8e1-4039-93d9-3a7529463340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:44:bf:a9:14:1c:73:b2:ff:63:62:13:5e:6e:
4f:d1:3e:3f:38:28:58:f9:c8:a1:96:8b:a3:fb:6c:
15:ba:5d:80:ff:8a:b1:2f:99:f5:d1:fa:f5:9b:7a:
2f:3b:d4:86:12:99:ea:57:e8:84:1b:62:1f:6c:9e:
f5:a5:f4:3a:62:5e:6d:77:49:35:78:c5:c1:59:25:
7f:f7:19:ff:52:62:b4:6c:94:96:4d:b8:35:60:80:
f4:21:d8:a3:71:69:47:e0:17:f1:82:9c:2b:70:38:
bf:c6:b7:70:12:f0:94:8e:d5:f0:80:69:a1:97:58:
36:d9:f4:6d:6a:c1:d0:5f:52:31:6a:d3:53:bc:46:
7f:85:be:37:d3:78:a2:b7:6c:fd:55:a8:5d:56:d5:
89:dd:a2:54:5e:2c:7e:04:27:00:2f:c7:6b:d5:b1:
d2:50:11:0d:51:08:3f:2c:09:4f:0b:cb:f5:ef:1b:
c4:44:8f:83:6c:78:29:a8:61:31:9c:33:b3:b6:a8:
3f:b6:cd:fb:21:41:a4:0d:0d:a8:74:57:88:f1:3a:
c9:9a:3f:a3:a9:48:62:5a:b7:12:9f:f4:b4:a7:fa:
37:2a:07:19:b0:f7:b7:e9:8e:0e:bb:61:4e:32:da:
af:e7:95:5f:10:03:f2:0e:4e:6e:ff:c0:c9:71:87:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:AE:25:C4:F7:FB:A6:A4:46:47:E2:5C:1D:7C:BD:AF:5F:65:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7dc37673-bdd7-3241-902b-18e81ca65933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.94.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:45:11:30:9e:5d:0f:73:ba:aa:f4:bf:67:d0:aa:13:4d:26:
e9:9d:58:60:38:00:f6:dd:0d:89:09:d1:98:62:06:28:e6:cf:
ca:45:a0:e6:9e:b1:b5:ce:9b:c9:6e:22:d0:aa:fc:78:2e:ac:
8a:de:32:25:8c:4d:0d:72:7f:33:c6:43:03:c9:77:5e:31:23:
fc:98:90:60:c5:58:11:91:16:87:87:80:a2:ed:c3:8a:cd:78:
41:42:d6:5c:93:af:16:fa:ad:46:be:43:06:a2:32:6d:53:2a:
32:ff:1d:f9:ab:96:3d:06:72:b8:58:bc:3d:47:7a:63:14:ba:
49:05:35:ae:77:9f:b9:67:91:4e:9e:04:c5:29:68:4a:16:8c:
e4:02:b1:6e:48:d4:e8:44:e7:9d:9d:f5:c8:bd:ab:e8:81:04:
d2:fa:e7:4b:f3:3a:1c:34:be:3f:27:79:3f:be:1a:04:86:50:
85:58:d7:c8:de:17:b8:19:7f:6e:a8:a6:fd:ab:31:bd:c5:00:
ed:e1:85:1e:57:20:86:4e:c6:c6:c9:4e:2f:85:72:9d:e5:8e:
2b:99:a4:3a:3a:74:9d:82:4e:d2:fd:fc:d7:14:c2:71:15:71:
4c:f9:f6:2c:6e:33:a7:b1:1e:f5:9e:10:cb:5c:ce:57:3e:e7:
a2:e0:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:25:57 2025 by rpki-client