Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98968120-cdc1-3190-9d6e-bbea33233f9c.roa
File: 98968120-cdc1-3190-9d6e-bbea33233f9c.roa (raw, json)
Hash identifier: nlSVZFKUZF/K9Qphs4tCjQh9uLG96RAn1ma7EtSy950=
Subject key identifier: 09:3D:6B:97:D9:E4:2E:19:E4:27:7F:1C:94:AD:0B:52:3D:66:91:55
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1F09B47DF41FAE6A9AB300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98968120-cdc1-3190-9d6e-bbea33233f9c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.136.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1f:09:b4:7d:f4:1f:ae:6a:9a:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2749bfd3-a448-4e9c-80a1-295a05e8aa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:d9:b5:b3:bc:64:2c:8e:17:c6:78:5c:27:
d7:cf:48:be:dd:11:a8:64:0f:ae:07:e3:27:ea:58:
bd:91:de:60:48:d5:b0:c6:ae:de:16:f3:4c:df:9f:
3e:17:29:b6:f2:4a:48:13:bb:8d:55:f5:9f:01:20:
33:da:57:ec:72:b7:fb:f9:14:18:a4:bd:0a:d3:6c:
59:7a:dc:1c:a6:91:0e:70:d4:9a:20:47:16:e8:1a:
69:7d:1d:53:aa:35:ee:d2:38:f3:67:31:79:6e:95:
20:6d:31:79:c4:c0:be:5b:61:c6:23:07:2d:23:54:
b7:54:71:96:18:82:e5:e2:fd:d5:88:ca:5e:bc:c1:
80:3e:9b:7d:bd:a8:7f:ed:8d:61:7f:72:32:fc:e2:
7a:c9:ca:df:17:29:b4:40:1d:68:7c:da:9f:7a:7c:
29:9d:f9:90:c6:60:9c:c9:b1:a4:cb:23:b6:c0:e5:
63:6b:61:80:34:0a:af:20:2e:1c:8d:e2:80:33:95:
2c:e8:49:88:36:4e:11:ad:c0:db:b0:9d:3f:c1:a0:
61:88:e2:b6:cd:3b:26:c6:46:09:e6:f3:c6:74:31:
57:b7:0d:0b:04:88:74:ee:d0:25:48:db:89:28:b3:
58:e4:e0:0b:c7:84:3e:2c:15:e6:10:86:a1:3d:11:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:6B:97:D9:E4:2E:19:E4:27:7F:1C:94:AD:0B:52:3D:66:91:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98968120-cdc1-3190-9d6e-bbea33233f9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.136.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:6f:eb:b4:4d:48:1d:d9:83:0f:ba:6f:17:c3:6f:ae:08:0d:
76:2a:9f:ae:b8:91:f0:a5:ed:f5:bd:50:88:1f:f9:9e:42:13:
84:a1:fb:6b:e3:62:ab:f8:ef:18:12:2a:c2:d5:23:d0:18:0a:
c5:aa:bb:d1:43:91:60:14:3d:91:6f:8d:c9:76:05:77:3c:51:
64:9d:0a:21:1a:c6:c1:8b:28:70:23:62:55:07:30:66:2c:1e:
06:2f:40:33:fb:2b:cc:60:6a:df:19:91:00:1c:ca:96:47:86:
ac:b4:82:23:2a:81:de:d9:fb:62:6b:dc:41:de:18:29:f2:8b:
3c:60:54:f8:8b:60:ad:70:24:55:ac:97:25:90:b9:7e:a7:06:
47:f2:95:c8:cc:03:8b:b5:e4:ed:97:b0:ef:e5:61:05:61:57:
ca:72:4f:cf:87:02:1b:05:dc:e2:88:b8:43:7a:a7:9b:8b:bd:
1b:9a:6e:7d:60:3e:38:84:60:eb:a5:79:d2:ac:cb:af:e8:22:
95:fe:aa:a2:0e:cf:ef:15:02:ac:ff:cb:40:c3:b3:2e:49:29:
07:2a:be:47:2c:8a:0b:77:b2:05:0d:0d:dc:96:a5:27:a6:c6:
bf:52:00:6f:67:3b:e6:c6:3e:aa:a4:04:3e:64:eb:98:e4:dd:
42:2a:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:27 2025 by rpki-client