Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b859710-2fe5-3143-a6f9-dff119598982.roa
File: 8b859710-2fe5-3143-a6f9-dff119598982.roa (raw, json)
Hash identifier: Zz4imGXE1Bawkl82vv8wZUx7KQ1vnz73HKUKp0K1gW8=
Subject key identifier: 50:3C:27:7B:B5:81:90:A2:43:A2:D8:AD:00:D6:12:61:A4:36:E4:A7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2707CF7F213DEF5EC72780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b859710-2fe5-3143-a6f9-dff119598982.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:07:cf:7f:21:3d:ef:5e:c7:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5bbce57c-fb1e-4165-a146-75fa03d16fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:02:4b:2e:b2:61:66:e2:29:3a:d9:85:b4:02:
18:ba:3b:af:ec:68:47:bd:29:fe:85:8f:9f:8b:a3:
c0:f7:2b:d0:27:c6:d3:25:03:a1:c2:f2:74:df:01:
ad:ab:cd:14:94:2b:85:85:6e:34:21:79:4b:03:1e:
8f:45:40:57:8d:21:76:5b:57:7c:ce:21:c6:87:3c:
9e:62:ec:de:2b:62:de:12:b1:9c:c9:01:2a:99:8a:
38:53:b8:b2:3b:7f:ff:66:27:ab:3f:40:29:36:b7:
cd:39:01:67:21:b0:10:ea:59:97:af:56:49:75:d9:
91:63:94:24:d1:c7:eb:12:70:50:62:1f:31:42:06:
97:03:4d:33:84:e3:86:e6:fc:f4:b1:d0:70:53:08:
96:f0:a3:63:ad:f2:98:98:36:f9:85:7c:69:61:e0:
9e:ca:70:7c:16:b6:0f:db:6c:8f:12:f8:2e:86:80:
16:b9:bd:56:89:4c:83:d2:e9:fd:bb:90:bd:57:f2:
8f:af:61:01:d9:ea:66:b7:05:0f:e5:e0:65:79:b5:
7f:7f:c5:0f:e1:60:01:75:03:00:91:b3:05:e9:01:
f4:13:f2:09:c1:f3:ed:07:68:b1:b1:99:ee:d2:b6:
bb:f9:7b:1a:42:26:01:46:1f:ad:4e:86:6c:c7:e8:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3C:27:7B:B5:81:90:A2:43:A2:D8:AD:00:D6:12:61:A4:36:E4:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b859710-2fe5-3143-a6f9-dff119598982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:b8:f7:ca:eb:6a:f4:4e:cd:f9:5f:ee:7b:56:ca:27:e2:ac:
89:99:a2:de:65:09:f1:5c:5c:97:1f:81:22:ae:cb:31:70:bf:
ad:3c:e0:90:8a:e3:7d:01:93:13:b3:4c:3b:66:26:68:06:a5:
47:3f:9e:05:88:47:ed:79:2a:e0:29:fe:15:ba:0b:70:05:26:
32:c4:15:dd:b0:71:ec:a0:8c:f8:d5:99:29:59:b4:bf:79:f1:
a3:b1:5e:42:28:9e:1a:d5:06:89:b4:23:14:55:68:50:fc:1a:
7a:44:e4:f0:3a:6e:ed:7e:3c:5c:bd:58:fd:68:25:ba:fc:c6:
7a:1f:80:55:09:9f:e4:a2:47:3f:0e:f2:95:20:3d:9b:26:8b:
5d:6d:d7:ad:a2:9c:f6:8c:f6:73:5a:62:6c:92:26:d2:e4:7f:
22:3e:0c:dc:5f:ac:08:13:6e:cc:1a:34:5d:24:b1:ac:63:f0:
d4:c3:cc:b4:3d:4a:71:df:2b:20:29:43:e2:cb:4d:80:80:86:
ce:da:9a:59:63:03:23:29:c5:04:1e:a3:b2:81:df:64:1c:77:
32:be:b2:0e:84:4f:a4:17:9c:f0:12:c9:98:90:78:3b:57:9e:
4d:bd:20:29:d6:52:5e:37:99:d2:40:d6:68:27:f5:99:14:e2:
53:d0:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:59:59 2025 by rpki-client