Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9858f639-21e1-3d42-8beb-f398f2899114.roa
File: 9858f639-21e1-3d42-8beb-f398f2899114.roa (raw, json)
Hash identifier: EFMClIj3TX2+YBHnHA8HuROqY47nXnEv7DNsYZMXB8E=
Subject key identifier: CD:4D:47:90:2C:7F:F3:BA:ED:90:AE:AB:EC:A6:EA:F2:4A:E2:EB:E8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A01C6F9C16B57C616550100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9858f639-21e1-3d42-8beb-f398f2899114.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.125.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:01:c6:f9:c1:6b:57:c6:16:55:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e15a0fe3-d187-4ae3-b24e-49751f79e4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:1c:e2:9f:1e:89:ef:9f:d5:02:a0:54:7a:
76:d8:15:08:25:1d:a1:ce:40:a0:4e:1c:63:3a:89:
a2:cb:da:f0:df:b0:94:12:23:59:33:64:8a:b2:79:
38:f8:59:90:fb:ef:4a:22:5a:b3:b1:3d:5e:22:8b:
22:8f:bf:82:56:c4:c9:4b:ee:b9:64:e5:3b:06:13:
ab:3d:33:30:7a:b1:2d:b6:08:d8:b6:b5:87:4b:78:
fb:05:69:3b:e4:05:00:d5:d9:2c:05:ee:72:7f:2a:
2f:b2:5e:0d:18:1b:11:bc:22:7a:e6:ed:6d:43:05:
3a:59:8e:43:28:5b:b2:19:ad:ed:2b:de:df:ad:ff:
71:82:5b:ea:73:9e:79:0e:27:59:9d:aa:c4:e1:d9:
80:a4:34:1f:a5:a2:31:26:73:58:6e:da:59:c2:27:
05:33:af:84:3e:7f:a9:f7:a1:79:31:73:0b:08:e9:
45:84:60:0d:5c:7b:be:62:76:b9:66:e3:7a:42:eb:
28:e7:3d:95:95:b6:f6:ee:e9:16:2b:5e:f3:d8:7f:
66:8b:c5:aa:db:22:ee:ef:7f:6f:00:62:32:25:5f:
18:88:ce:63:b4:67:3f:aa:d7:1f:59:1b:b8:7f:69:
73:83:07:27:ed:c0:21:ff:98:2d:ea:fb:0b:22:9e:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:47:90:2C:7F:F3:BA:ED:90:AE:AB:EC:A6:EA:F2:4A:E2:EB:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9858f639-21e1-3d42-8beb-f398f2899114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.125.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:70:f4:e1:29:e1:4c:6d:b5:fe:d1:fe:52:d5:6c:08:48:7b:
42:ba:97:18:c8:13:53:a5:99:31:79:4a:5c:95:fe:3e:21:26:
53:fd:f7:b2:c7:90:ef:c7:91:40:0a:21:fa:9d:7f:b2:97:52:
af:89:18:5f:0d:fb:a8:0a:ed:6c:7f:64:58:c3:c0:ca:dc:52:
40:2b:8e:d8:a3:05:ab:70:a5:ef:1d:d6:08:b4:55:6f:bc:bd:
81:5b:a4:f8:ce:56:a2:e5:ee:ba:0a:d5:58:4b:08:21:dd:3e:
ea:ae:81:9f:63:c1:cd:e4:64:1d:8a:ee:68:45:d3:18:46:cc:
a3:63:6b:36:a2:73:41:f6:bc:bd:36:9d:97:20:35:da:4a:44:
90:89:6a:e3:98:40:ba:10:12:d0:95:c5:27:6d:dd:e4:41:e6:
91:0a:57:f5:c5:78:82:af:29:77:2b:eb:b6:b3:11:14:7d:14:
29:ca:bb:c8:6f:77:94:fe:fc:e8:c6:1a:a5:2e:01:83:c3:e6:
74:dd:9b:66:b1:10:95:3d:da:3b:86:fe:4d:5a:ee:31:8d:99:
a8:2c:46:d1:65:05:85:34:b8:e1:54:24:59:e9:bb:bb:c7:a3:
e5:0f:f2:b7:1b:32:40:89:9b:2a:a8:d5:fe:56:98:e1:be:dc:
91:44:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:25:04 2025 by rpki-client