Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a9aa249-b8b9-30bc-b3a7-17122a4e68f4.roa
File: 9a9aa249-b8b9-30bc-b3a7-17122a4e68f4.roa (raw, json)
Hash identifier: x7ftlKEHbT4Duc2+P9KTKZc+NNBRqPFdMGA7u2BQ+yw=
Subject key identifier: 46:77:B6:B1:C8:4C:BD:27:CE:39:62:24:63:92:6E:FE:C6:DD:9C:7B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1DF3B466E8A6A4AB7F3900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a9aa249-b8b9-30bc-b3a7-17122a4e68f4.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.137.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:f3:b4:66:e8:a6:a4:ab:7f:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=32186bec-3e5a-4110-8853-517a926095ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:bc:ca:14:19:ab:8c:3f:57:52:14:e8:37:
93:fe:60:5e:e5:4f:09:dc:2b:b0:e3:42:e3:bc:a9:
c9:8c:1a:56:1e:78:0c:18:87:17:28:24:1c:af:88:
94:d1:6f:2b:f1:29:da:23:26:ed:f5:68:4a:ff:13:
28:3e:14:e3:8e:e9:a0:5e:f4:40:ef:9d:23:7e:5a:
82:29:79:d5:e4:a2:e3:ac:56:f9:32:8e:ac:f9:58:
b4:4f:b8:88:3b:23:b7:bc:b5:64:e3:e3:aa:43:01:
f4:99:d2:10:6c:5b:b5:35:87:0a:00:35:b1:cd:3e:
bc:72:69:10:ab:9c:81:f0:5d:f3:b9:a1:f9:5c:dc:
d5:89:2a:eb:77:99:bd:d2:57:4a:fd:91:ce:43:84:
5b:bb:b1:da:a6:82:4b:66:77:dc:12:95:35:cb:d0:
6c:4e:de:88:af:7e:11:63:2a:39:1f:07:ef:b4:bc:
5c:3b:73:b4:10:97:7c:0b:2b:50:8f:1f:26:5e:6b:
a8:cd:53:19:36:c4:d7:dc:2a:e4:b9:f1:28:86:55:
ea:c0:f7:96:fc:dd:2f:5a:b1:46:c3:3e:7b:ca:cd:
c7:c2:92:48:81:21:a7:91:56:77:85:80:33:9e:4d:
e2:56:82:7b:a4:8e:ee:b8:64:c1:90:de:4f:8c:f2:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:B6:B1:C8:4C:BD:27:CE:39:62:24:63:92:6E:FE:C6:DD:9C:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a9aa249-b8b9-30bc-b3a7-17122a4e68f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:5f:fb:06:65:bc:0f:49:64:36:8f:84:fc:6d:29:f9:df:a3:
f7:ab:16:bd:9c:06:69:06:ea:43:d2:f5:e0:c4:ba:45:ca:f9:
81:7e:65:3b:8a:53:40:66:28:7c:62:66:a4:82:96:a7:55:38:
a2:bc:c9:26:e9:58:43:5d:19:b5:ce:d2:04:41:e1:66:bd:14:
f8:0b:66:66:9e:1b:43:5a:1d:0e:ca:2b:7c:6d:ea:aa:77:e4:
61:ec:5f:f3:74:11:5d:c8:c1:c4:e8:96:4a:a2:fc:71:85:8a:
00:b4:34:d4:5b:85:7b:79:04:54:4a:f6:7d:7c:8d:49:ff:bb:
85:d0:15:13:97:e6:19:3a:07:e2:67:da:4f:fe:5b:44:5c:08:
e5:6d:f3:4d:cc:06:2f:30:23:d2:60:ac:10:0b:54:88:c0:1a:
3a:14:81:76:6a:46:76:78:34:66:44:03:2a:bc:5d:92:4b:42:
20:cf:79:92:b0:93:6c:cb:0b:20:87:7d:77:cd:8d:0a:a1:00:
af:3f:0c:79:92:6d:26:2e:ab:91:e2:40:8d:00:10:b4:15:b4:
72:58:3d:2a:eb:f7:90:5c:56:9d:4d:dd:83:97:d8:73:92:41:
f1:73:ac:b7:b4:8d:8e:de:df:55:c4:9a:eb:be:a6:6a:92:9f:
8f:62:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:40:34 2025 by rpki-client