Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/866c21d3-b09a-3d8a-bff9-3c882bf22751.roa
File: 866c21d3-b09a-3d8a-bff9-3c882bf22751.roa (raw, json)
Hash identifier: 8eU6ja81ovKUu/TB5mfVR2TnCmSuCGhMLZEnasauSU0=
Subject key identifier: 9D:B8:24:7C:28:B0:1C:40:7A:B8:DF:35:4E:E3:BB:21:89:BC:56:2A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FDCB8C528C359A986F6200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/866c21d3-b09a-3d8a-bff9-3c882bf22751.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.118.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fd:cb:8c:52:8c:35:9a:98:6f:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=554e6f9c-060d-43f5-91a2-3af46c0c574c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:19:d1:bd:71:bd:00:5a:5b:fd:4c:da:ba:
67:a4:84:c0:04:f5:90:4a:71:f1:8a:5e:6b:e1:b2:
af:e8:ca:39:38:65:e0:37:27:a7:aa:f1:c2:ad:52:
52:f7:a8:95:11:f3:49:2f:db:da:8b:27:9d:5c:24:
96:ec:09:96:ca:74:58:c3:f0:d6:5b:9d:5b:f5:45:
4e:9b:92:bb:1e:ee:de:05:b0:4f:20:1e:67:70:85:
62:98:55:53:14:75:50:f5:e2:07:41:b1:5e:dc:e8:
af:14:ae:ed:df:22:ed:7f:bd:4d:39:3c:6c:72:5c:
7e:0f:94:6d:44:be:c5:20:4b:b3:21:78:88:ef:1f:
70:da:5e:b4:5e:80:c1:32:4d:cc:95:d4:87:23:67:
a6:bf:44:37:d5:0b:07:ed:bd:e4:1c:cc:71:9e:a8:
ab:a6:6c:7c:f5:83:90:71:31:16:46:8a:e5:09:59:
00:e6:3f:fc:dd:dd:7d:df:93:5c:09:7f:ec:65:81:
0b:ee:a3:66:0d:c8:25:cf:8a:8c:41:76:95:9b:92:
6a:41:fb:a6:e9:9c:75:58:cd:e7:b6:89:91:2c:46:
6b:d9:7f:f3:ab:ba:60:ed:63:1f:0b:a8:72:b2:a7:
5b:bf:e7:50:4a:60:a6:f8:d3:4b:29:19:f2:80:3e:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:24:7C:28:B0:1C:40:7A:B8:DF:35:4E:E3:BB:21:89:BC:56:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/866c21d3-b09a-3d8a-bff9-3c882bf22751.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.118.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:95:60:b0:6c:87:6b:49:57:e0:29:6b:43:33:a6:f2:42:93:
e5:fb:4e:3f:a8:23:4d:72:c4:a5:a4:22:98:f3:a1:a8:1e:e0:
4f:4b:dc:c6:7e:3b:71:b3:92:cb:14:11:60:2b:77:c1:f9:4f:
bb:b9:26:f1:77:94:fb:ca:00:b6:09:96:dc:6d:81:7a:10:96:
03:7a:02:6d:c4:4a:8a:a6:6d:c0:14:a5:c1:b5:90:80:1d:ba:
7c:11:55:9b:8b:91:03:95:70:41:1c:d4:92:b8:21:ab:27:4d:
84:01:d6:7e:81:d7:1f:43:95:d9:79:d2:f1:01:d9:d7:9f:85:
60:79:df:cd:e5:b5:42:7a:0b:da:ac:e5:96:57:d5:28:ea:d4:
c2:dd:48:20:47:d6:f1:58:25:98:ca:6c:df:c5:5b:70:ff:d8:
ae:7d:18:a7:9c:7b:3a:84:31:c1:09:26:45:47:d3:c1:b8:16:
a5:41:ea:21:6a:c3:7f:03:a3:fb:5c:16:cc:93:4d:45:47:5b:
ab:63:78:10:ce:ec:5c:53:48:d2:71:d5:d0:63:99:31:88:b3:
23:98:b6:01:aa:3e:fe:78:e7:3f:1f:53:4b:04:c5:31:5e:c8:
b6:98:46:21:68:52:95:22:41:10:ad:e4:9a:65:a4:13:bb:3a:
77:f3:1f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:27 2025 by rpki-client