Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/947bb774-0646-3aef-b3a7-f77e0b267455.roa
File: 947bb774-0646-3aef-b3a7-f77e0b267455.roa (raw, json)
Hash identifier: tUoHjqmcQP/LrgzH5WI3TxRxZtPZCdQMZ+CkaXJZ3Jc=
Subject key identifier: EF:74:FC:BD:0E:82:9D:64:12:75:46:08:4B:E9:82:9E:D9:84:2D:63
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1E92DDC656F06EA45949C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/947bb774-0646-3aef-b3a7-f77e0b267455.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.108.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1e:92:dd:c6:56:f0:6e:a4:59:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f95d7774-42f5-40c3-9b5c-b7f30f8b7b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:b9:2c:95:10:ce:8e:f9:6d:af:0f:f2:83:
0c:8a:cb:da:e7:7f:8f:b1:ac:63:60:14:c4:b3:69:
a5:36:a9:ca:60:d5:db:d9:1c:43:7e:34:df:d8:d3:
59:fb:a9:0e:c3:a6:fc:50:ad:94:5f:b1:44:bf:d7:
6a:cf:2e:df:19:14:d3:f6:74:c9:b5:81:49:bf:84:
bf:12:19:5a:f5:3c:58:a2:cc:4f:9f:21:fd:8d:ff:
9a:83:56:54:b2:ff:3b:f0:4d:47:28:2a:65:c5:50:
ec:73:fa:42:d4:a6:0e:92:d5:d2:c8:e5:db:17:19:
80:5a:b6:d1:85:2a:a3:0f:dd:c8:81:4a:1a:35:c4:
0b:c6:af:6b:d5:79:1d:1d:55:b9:c8:4c:4b:b0:f6:
35:8e:2a:2a:0d:f1:1d:00:4e:c4:ab:ef:5a:e9:98:
a1:6e:a0:28:4d:72:54:a1:5c:f1:2a:a6:a4:e2:4c:
86:a0:6c:a2:3d:23:48:84:5f:04:61:45:85:9b:3e:
1d:18:e9:65:01:63:2d:33:bd:8c:79:4f:69:f9:2d:
5b:f1:c0:e8:d7:be:1d:a8:48:2b:64:9a:69:9a:2a:
d1:36:e1:5d:f6:6c:e6:7e:81:12:e7:0c:5e:43:fe:
b1:60:c5:65:d5:c8:2b:d8:df:04:46:be:17:35:13:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:74:FC:BD:0E:82:9D:64:12:75:46:08:4B:E9:82:9E:D9:84:2D:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/947bb774-0646-3aef-b3a7-f77e0b267455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.108.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:d7:65:b6:45:31:50:5c:d8:fc:32:79:a2:fe:63:ec:c7:e0:
d1:18:78:77:2f:91:c5:fd:89:a7:12:35:e6:80:83:9b:4d:05:
75:22:86:78:7f:e2:d5:36:8c:a1:d1:5e:fa:c7:70:ee:cf:77:
93:64:21:d0:08:e4:23:62:ab:be:df:99:fb:36:7d:65:00:6e:
97:ad:ae:34:18:38:f9:2f:0a:ec:63:e8:0e:2a:ba:7c:c9:f3:
16:26:d1:d5:2c:86:30:2d:4e:ab:d2:04:b7:11:33:96:d7:1c:
b8:3a:ea:8b:71:b5:32:ef:5f:6b:c1:75:0f:92:e6:ff:ab:01:
a7:cd:0d:c8:2d:13:3a:e0:ad:29:53:14:63:92:02:8b:4a:1f:
17:21:56:b7:85:f7:b2:e0:95:ef:78:f7:08:e8:5c:2e:01:42:
1a:c2:c1:49:f5:69:7b:f1:b0:d4:0c:fd:b0:4a:44:8e:b6:e5:
7f:54:01:f6:c3:4c:97:c6:58:3f:56:25:e4:3a:dd:b5:82:33:
b1:d5:12:35:46:66:fe:92:af:a6:73:db:56:f0:0b:4a:11:7c:
74:e0:2e:32:0c:68:58:4f:83:ea:8b:55:26:ca:89:de:ba:54:
4c:ad:32:fa:0b:b0:2d:7b:e6:2f:3b:23:95:d9:ad:b8:97:e5:
b7:d4:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:25:52 2025 by rpki-client