Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a15c51e0-85a8-34f5-a0eb-ecc67fb03882.roa
File: a15c51e0-85a8-34f5-a0eb-ecc67fb03882.roa (raw, json)
Hash identifier: 1hSZS9fQb3bfYkzBd7SBQaU3iQ+0JtpJRJoyhHFbFZQ=
Subject key identifier: 44:C0:A5:6B:57:36:91:26:9B:F9:08:42:76:02:A1:28:2B:F3:BA:3F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1F8AD31642EAD0BF962800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a15c51e0-85a8-34f5-a0eb-ecc67fb03882.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.136.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1f:8a:d3:16:42:ea:d0:bf:96:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=23c8a823-f2c5-4309-9cb3-a716e09037c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:e0:ed:28:b3:a7:7a:5a:16:10:e3:ca:4c:
28:b2:d6:71:ab:32:e4:c0:1e:ac:8d:d4:0f:dd:30:
d9:af:8c:8a:47:bc:a5:27:6d:6b:aa:f2:07:5a:70:
9f:32:0f:ef:2c:02:db:f4:74:c1:d7:2a:3c:b4:0a:
96:2b:1d:2c:41:b3:b4:a5:59:b0:b1:89:b9:92:31:
4f:a3:48:3c:15:2d:50:ae:75:c0:7c:4c:f0:96:d6:
f3:f8:a1:1f:c8:5a:8b:be:e4:29:70:05:c9:3f:f7:
36:d9:2a:b5:8c:3d:a1:c6:fc:c2:7d:55:bf:12:d5:
45:c1:b9:25:cb:78:9d:aa:e2:25:41:ea:ca:e3:7c:
90:8d:5f:45:7b:41:aa:e6:b3:a8:c7:44:51:73:cc:
1d:31:31:e9:52:3c:3c:52:64:75:72:0d:e0:ae:bc:
65:1b:8c:a4:9a:9f:82:28:a7:45:69:2e:c2:3d:cb:
7b:b4:2c:8d:0b:69:43:a0:f8:7f:81:8e:9a:11:33:
dc:44:41:4e:6f:8d:7f:a6:57:52:36:e5:73:11:e3:
0a:7c:80:fa:e7:39:48:5d:81:76:f0:be:b1:38:28:
3d:7e:5d:50:89:51:6c:10:94:e9:61:94:96:f6:59:
7d:b1:b9:d5:26:b8:a7:88:5b:e9:47:f1:12:d9:2c:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C0:A5:6B:57:36:91:26:9B:F9:08:42:76:02:A1:28:2B:F3:BA:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a15c51e0-85a8-34f5-a0eb-ecc67fb03882.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.136.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:8c:35:7a:de:1f:c4:ed:05:4f:b1:2f:e6:45:9b:85:40:c6:
b7:bd:a8:6f:9b:bf:d6:62:d1:e1:31:8d:01:67:3d:bc:75:e3:
2c:87:4e:87:b6:b6:a0:c9:85:9c:41:2e:fa:44:89:14:fe:ac:
09:94:1e:97:32:63:f6:71:3d:98:02:f6:4e:19:84:c0:b4:19:
8e:83:fd:9f:81:b4:67:ab:78:d2:be:ae:81:19:5a:5b:13:43:
52:b3:4e:1b:db:37:42:89:98:9c:d8:4e:08:e1:c9:1f:b6:f0:
14:eb:dd:75:6b:8f:88:19:75:45:98:b3:dc:91:e3:37:b9:ab:
9e:9f:8e:04:d7:6a:a4:50:79:ea:5c:a8:21:20:3c:0e:fb:e0:
81:19:ca:7b:30:c9:db:13:26:1b:de:8d:19:09:8c:7f:3d:3d:
ad:dd:67:76:8a:59:65:0b:17:ab:58:f9:36:ac:e0:53:a3:64:
0d:a5:55:6a:17:42:e0:9e:67:cf:fb:c1:a5:1d:38:2d:21:5b:
77:98:14:5b:8c:c4:da:9f:0c:e9:ad:cd:d3:06:df:66:ff:f4:
50:ab:ef:a1:b9:6e:3b:66:d3:32:53:6a:d0:40:06:b6:24:43:
bc:fb:9a:8d:48:11:13:84:32:cb:c1:fc:16:fd:f1:55:a1:48:
d6:86:34:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:36:47 2025 by rpki-client