Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91970ae7-3224-361d-9277-67d601eb1812.roa
File: 91970ae7-3224-361d-9277-67d601eb1812.roa (raw, json)
Hash identifier: I6nKi/Av+gPABd3jvQL4jmze808lxoQP+l3Xe98Z2Bo=
Subject key identifier: 46:FE:8E:8E:6E:95:28:61:C0:47:DB:83:A5:7E:E8:97:0F:CD:FC:9F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A055FF08D40AF7FE7EB6380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91970ae7-3224-361d-9277-67d601eb1812.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.136.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:5f:f0:8d:40:af:7f:e7:eb:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5616148b-60d9-47f9-8ce8-d854c9e60da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8d:c3:83:57:64:0d:89:8a:9d:db:b6:fc:e2:
d3:42:31:1f:c1:3b:b8:b9:e3:59:34:e9:63:4e:0b:
d3:3c:af:c3:c0:b7:0a:12:25:04:63:ca:4e:9a:e4:
7a:e9:74:5d:b9:87:4a:33:5f:c9:72:0c:81:6b:a8:
fc:be:f6:dc:b3:2c:02:e0:b1:00:ed:ef:00:6e:e0:
fa:e0:eb:e1:d0:51:ac:b1:4c:c3:0e:ad:6a:8e:7f:
d1:23:c6:df:7e:f7:6c:17:97:f7:57:68:6a:40:e9:
0b:b4:6a:d6:aa:9b:a0:67:7a:39:56:f3:6a:55:ad:
44:69:e0:58:50:12:d2:a7:c5:2f:a0:ce:51:c6:05:
88:35:c1:06:db:3a:8f:ce:5b:5f:3b:22:3e:e2:d2:
1c:3b:f6:92:1a:5f:48:b1:40:cf:cf:ef:67:a2:24:
85:30:3c:29:88:52:7d:ec:49:cd:17:48:e7:39:40:
c0:95:1d:47:58:19:8a:0f:6b:ed:f9:5c:ea:52:e2:
9d:c9:89:75:fe:b9:f9:ab:5d:c8:63:83:7f:f0:58:
c6:cb:d4:62:32:68:27:dd:83:06:d5:8e:3c:0b:ed:
fc:f4:de:35:c2:b4:0a:e3:36:27:91:b9:38:71:06:
b8:aa:dc:16:33:63:5d:e9:0c:bb:1a:47:7d:84:32:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:8E:8E:6E:95:28:61:C0:47:DB:83:A5:7E:E8:97:0F:CD:FC:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91970ae7-3224-361d-9277-67d601eb1812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.136.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:49:b3:cf:5d:d1:ad:1d:1a:43:f2:9a:10:d6:31:ef:3f:d6:
51:c7:32:d2:1e:fb:d5:c2:37:0d:28:ab:73:fa:e1:9b:ea:fc:
21:6d:e3:be:8a:3b:d5:8b:02:37:0e:7e:43:21:90:6f:e3:31:
52:3f:eb:3e:31:c7:e6:47:77:73:37:ba:a2:99:a6:d1:04:b4:
3a:a1:f0:e6:29:22:4a:6d:24:3a:36:d3:3e:a3:8e:15:6f:da:
fc:44:16:a3:a1:05:53:d8:60:ee:60:8b:06:32:27:c8:e7:d0:
42:7b:00:6d:25:d1:ed:2e:1f:a7:8f:4c:c5:b4:1a:dc:49:8b:
cf:6d:40:e9:1d:73:ed:cd:59:05:dc:f2:a4:4e:69:2b:83:1b:
b9:5f:52:2e:6c:80:e8:9d:86:ff:42:0f:e2:96:55:2f:aa:03:
34:d5:8e:31:07:e6:1f:3b:df:21:7d:ff:56:38:02:f8:11:fe:
15:ea:2b:49:16:22:d2:33:f5:da:5f:d0:9f:90:fa:10:f8:08:
90:99:80:1b:5e:27:fa:fd:58:f0:1d:da:fe:7c:1b:48:48:02:
0c:05:44:ab:97:17:5e:e0:55:f5:2b:45:58:f9:1c:c3:c8:61:
7b:50:5f:23:c4:b4:cd:a5:2d:45:f8:68:9e:bf:7d:06:74:8e:
0f:7f:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:39:00 2025 by rpki-client