Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1bbaa3f-542a-399f-8a49-b7da14cc6957.roa
File: a1bbaa3f-542a-399f-8a49-b7da14cc6957.roa (raw, json)
Hash identifier: QreC0K70cbu3P9D/j0Jh1x8WOqxC/qghryNf8+MfA6I=
Subject key identifier: 89:D1:9F:43:58:BD:15:59:F2:1C:40:9C:EE:99:B4:7F:0F:F0:D7:45
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0A287C0F45D6FA37D89080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1bbaa3f-542a-399f-8a49-b7da14cc6957.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.129.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:28:7c:0f:45:d6:fa:37:d8:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a6336a1b-4e4f-424f-9396-64c218d9daa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:04:36:31:ad:8d:7f:69:56:7e:b9:ef:43:
c0:94:90:3b:12:e0:b4:3f:9e:67:2b:8f:23:1c:14:
a4:f3:5c:f6:2c:4d:cf:7f:d1:83:ed:bb:49:16:67:
3d:64:b6:b1:54:5c:95:5f:20:74:bd:7b:7e:77:a2:
84:46:b4:09:07:cc:a8:a0:11:63:6d:01:87:5a:de:
03:b7:b6:3d:3d:68:42:32:4d:f2:03:67:92:99:66:
aa:bc:b0:ba:a6:39:cc:41:a4:af:d3:ac:50:e1:61:
93:e8:d5:84:fc:cb:ff:0d:b3:5f:8e:b4:73:26:38:
54:db:6c:2e:27:1b:22:84:8f:42:f9:7d:29:c4:18:
a2:82:12:19:a3:d3:54:a4:11:cf:b8:1d:ca:02:41:
24:5d:da:56:78:99:78:66:ec:7b:5c:5d:81:3b:0d:
5e:f7:98:a0:5e:b9:ce:f0:e9:87:9c:b7:95:80:08:
39:ca:a2:94:e6:d1:6e:07:79:44:62:d6:ba:cd:bc:
46:86:57:eb:9b:b6:4f:67:a3:1f:0a:94:34:a3:1d:
56:a2:bb:56:ef:5a:97:83:ee:63:22:23:52:98:a2:
43:15:8b:16:2c:db:5c:63:61:23:08:d1:c3:68:84:
17:62:11:4c:c7:0f:98:da:ae:63:01:67:84:c0:6d:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:9F:43:58:BD:15:59:F2:1C:40:9C:EE:99:B4:7F:0F:F0:D7:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1bbaa3f-542a-399f-8a49-b7da14cc6957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:e9:6e:d2:69:a2:c2:6e:1d:cd:be:cf:67:98:8d:90:db:7d:
75:a5:b6:b2:1c:31:91:eb:03:36:cd:9b:38:b2:95:33:5a:f7:
a5:4d:a2:e5:15:06:9d:23:5b:34:08:09:d9:63:84:49:dc:42:
15:e7:8c:7b:51:f0:41:83:88:a9:45:29:96:d8:e6:24:1a:ba:
4f:76:24:92:f0:f2:6e:77:81:2a:e6:a8:2f:99:f9:e6:9c:ba:
34:ed:f4:17:ae:0e:93:7a:89:50:b1:3b:68:8e:46:90:37:ab:
6d:12:14:96:bf:60:12:df:36:f2:b8:3e:a5:1b:7b:a1:a2:b0:
9a:a3:64:af:c1:33:5f:50:05:87:a1:81:9f:aa:c2:48:95:8e:
ee:e7:c5:fc:3c:09:7c:45:49:31:19:a2:6b:81:a4:67:a7:f9:
ac:0b:47:c0:d5:d4:c7:0f:c0:32:1d:bf:be:81:e9:77:e3:d3:
50:e2:14:07:c3:39:2c:7a:d4:92:1b:3b:65:52:b6:5a:cb:25:
7b:7b:42:80:7b:b0:18:fd:6e:45:c9:f4:4c:a8:59:e9:fd:c7:
bc:b8:bc:a0:2a:55:c0:94:2b:32:30:ac:b4:c5:69:a6:fe:04:
44:f0:4c:fc:63:08:b0:98:91:62:8d:00:07:82:6b:01:23:8f:
9b:43:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:20:20 2025 by rpki-client