Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e5fca82-05d9-3b4b-8bef-2892ac24391c.roa
File: 8e5fca82-05d9-3b4b-8bef-2892ac24391c.roa (raw, json)
Hash identifier: Neo27Sz1j6r+yPtGkSA9eQRxZI8uK3SS2Bf35GdvXeo=
Subject key identifier: 24:7D:AB:09:39:4E:79:DC:44:D1:11:69:2D:29:67:48:B7:64:EE:41
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F6680C1C5CE7E787A51200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e5fca82-05d9-3b4b-8bef-2892ac24391c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.87.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:68:0c:1c:5c:e7:e7:87:a5:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=70e922b7-7bfc-46fc-b0a1-55c7742dfccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:b3:db:9c:28:c5:3d:aa:0b:fd:9f:52:27:
fb:92:ca:ac:d3:7d:f6:13:80:74:87:58:0e:48:55:
02:77:45:81:ef:95:df:21:d7:d2:26:f0:dd:a9:94:
28:21:ca:09:61:46:a4:7c:36:fa:d3:bd:26:07:7c:
48:e3:20:58:87:30:dd:77:a9:aa:c6:11:17:a3:ab:
af:01:4d:81:9a:ef:cc:70:8c:87:50:e9:fa:af:43:
b5:3e:fb:d8:1b:00:d6:3a:7b:13:a7:40:6f:d6:84:
4f:8f:44:1b:ed:d3:43:0c:5c:fc:ca:a6:bc:b6:6e:
7d:02:e4:6f:f6:23:56:a9:fd:24:c5:2e:7b:b9:29:
52:3f:c6:0e:4d:00:d6:43:af:7a:15:15:6b:5b:ae:
90:62:a3:86:cc:c5:a7:ac:1d:0c:33:52:d4:e9:28:
a3:7b:f9:d8:0c:54:bd:02:49:ba:d1:77:1d:5f:2e:
db:00:dc:d1:48:b7:75:cb:84:02:48:7e:4b:d9:43:
33:ab:8a:61:53:a0:ea:1d:fd:a0:a5:22:bc:af:fc:
e4:0a:1c:a8:d3:0b:73:74:bd:c2:c6:47:f0:89:61:
38:21:0a:6a:89:4f:bf:99:12:77:a2:64:27:6b:df:
af:6d:88:0a:fb:6c:32:65:f0:5a:a0:ce:db:5b:92:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7D:AB:09:39:4E:79:DC:44:D1:11:69:2D:29:67:48:B7:64:EE:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e5fca82-05d9-3b4b-8bef-2892ac24391c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.87.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:43:0e:b4:fa:62:39:4d:d6:c8:af:0c:e7:12:8c:ff:5e:65:
c4:e0:12:8c:ec:48:f2:1f:e0:ae:c5:83:46:c1:d0:76:37:42:
42:a8:bd:40:44:dc:56:10:ad:1a:c1:91:8d:7e:3a:53:2a:d5:
e5:4c:59:a1:0a:b4:07:2c:7e:ac:e5:d8:d7:91:bf:9a:c7:68:
f2:73:8c:10:c0:bb:1b:68:4f:3b:5b:a2:17:5c:47:90:53:bd:
96:84:65:3d:52:38:89:66:a7:4a:13:e9:58:16:a7:e2:13:28:
5f:79:d2:e5:1d:eb:16:cb:ee:f0:f8:5a:86:06:fb:b6:5e:00:
90:79:76:61:5b:f5:ab:f2:93:f3:26:0e:3d:88:18:29:2e:96:
3c:35:84:39:78:af:7d:e2:e7:b9:8b:8e:2c:f1:fd:22:e3:df:
3d:eb:76:c9:bb:6e:1c:15:d9:ca:35:71:e4:60:f8:d7:52:70:
24:b2:7a:c7:3b:28:24:8c:ba:c4:50:a8:d7:aa:f6:fc:43:37:
08:f0:66:c9:b1:13:88:36:44:1e:2e:e3:a9:13:0b:d0:80:33:
33:be:70:e6:4a:b8:1a:c2:34:16:57:97:ce:16:ce:a5:3b:aa:
54:84:91:78:32:19:93:aa:1d:06:cd:40:b5:bf:50:01:18:38:
d6:a4:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:40:38 2025 by rpki-client