Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90df00a1-8086-36e3-b19c-69272402f76a.roa
File: 90df00a1-8086-36e3-b19c-69272402f76a.roa (raw, json)
Hash identifier: gKQtuGkIPWUw3gFD79FX/dmz02cIdlkOaSQkd+iF0MU=
Subject key identifier: 64:E6:EC:E3:B1:6F:2C:C7:BF:54:D3:4C:18:73:68:9A:6F:FC:EA:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720A7D8BF467699F18937680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90df00a1-8086-36e3-b19c-69272402f76a.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.172.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:7d:8b:f4:67:69:9f:18:93:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=5597ae86-1c5a-415d-baa6-c50d9fb387ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:30:28:57:bf:89:f3:c2:9e:43:62:3a:53:
1c:e9:bc:12:c8:66:a6:ef:ef:86:37:e9:62:a3:b6:
d2:7f:f9:bd:8b:88:2e:fc:4e:72:8f:95:73:f9:ca:
67:4a:c5:ad:ae:bd:61:ad:df:0b:ee:da:02:cb:9d:
e9:b7:06:28:6b:19:f8:ce:ed:e3:d4:67:fa:25:78:
95:67:73:8e:37:47:9a:a0:e7:d3:aa:20:06:a0:48:
67:ab:38:20:f6:ba:ca:b8:01:eb:91:cd:bc:ad:ba:
b2:ce:df:2d:1d:84:a9:9f:df:f0:fa:21:61:28:6b:
5c:52:16:d7:d8:15:4d:87:b1:78:5d:e8:90:14:b5:
04:aa:ae:8e:e3:92:68:cb:de:64:d6:2c:ca:9b:3c:
2c:7c:85:cb:c5:db:e4:e6:27:be:26:7f:8f:89:24:
b3:aa:44:eb:e0:1c:28:eb:9f:d0:4b:36:56:82:8f:
6e:d5:81:b8:75:9e:16:0f:56:bc:cb:6f:ad:62:f2:
06:ba:72:78:cd:25:b1:d4:e5:46:68:e7:b3:18:54:
0f:b8:23:34:1a:55:15:70:a0:f2:1d:81:ea:a7:64:
1b:ec:c0:f9:0e:d2:a6:64:05:0e:93:38:88:b4:ee:
38:e1:12:3b:22:30:d4:26:1e:57:72:67:90:82:1f:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:EC:E3:B1:6F:2C:C7:BF:54:D3:4C:18:73:68:9A:6F:FC:EA:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90df00a1-8086-36e3-b19c-69272402f76a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.172.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:4d:1b:39:b7:61:00:f6:2c:e6:5e:15:14:30:c6:b1:83:7c:
e7:5e:9e:aa:d2:d7:05:c5:45:a5:15:94:81:e5:a3:d1:82:50:
90:01:52:07:47:a0:e0:d4:7d:52:2c:f4:45:0f:1a:ae:ff:b1:
68:11:18:41:14:cd:a3:be:b5:9d:06:1b:d1:02:9b:2d:30:58:
c1:d6:d6:e6:46:a3:ea:af:58:f6:a4:c0:9a:4f:0d:6b:42:28:
3f:2d:65:d1:ce:30:16:94:3c:a6:8d:ce:e8:80:47:15:8b:cc:
00:71:c8:68:f0:ac:96:c2:fc:0b:89:b2:69:51:ce:80:eb:bd:
ec:af:08:a8:db:b6:95:66:cb:a2:d7:df:fe:1c:6f:1f:ad:a3:
42:77:19:54:bd:d6:8e:a8:e2:70:67:a6:3e:d7:37:6c:18:a1:
ef:7b:c2:c4:df:f3:c0:eb:67:0b:78:e8:40:4c:0b:82:bc:1c:
9b:61:71:0f:3e:21:5c:dd:8e:5a:e0:57:ef:ae:aa:29:b3:d3:
9d:20:20:cf:57:aa:c7:a6:33:3a:16:61:b0:83:72:82:8b:f3:
e8:f7:5b:78:92:e4:a7:02:c7:31:3b:6b:41:1a:a3:4a:fa:d6:
68:f0:a1:6a:29:85:39:94:b3:35:f0:23:f8:ed:28:59:be:34:
eb:94:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:20:25 2025 by rpki-client