Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a25335e3-beaa-3254-ac82-38ac0be20761.roa
File: a25335e3-beaa-3254-ac82-38ac0be20761.roa (raw, json)
Hash identifier: eQyB8teJB5tmHJdD1l2Hrz3cLSxRwgCHt96KeB8iHkw=
Subject key identifier: 7B:7A:06:50:FF:EF:78:B1:75:EF:61:96:C0:2C:D4:AE:F1:30:5F:BF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583D5BF2CBEE2319D9030EFD6D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a25335e3-beaa-3254-ac82-38ac0be20761.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Wed 26 Jun 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.96.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:f2:cb:ee:23:19:d9:03:0e:fd:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Jun 26 04:00:00 2024 GMT
Subject: CN=a0461900-dc0b-4caa-abe3-e2d8a61814e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:c1:5c:dc:22:d3:ae:12:f8:ce:4d:96:87:
37:1e:00:86:d6:04:bb:00:bc:e4:96:be:73:2a:98:
00:16:75:c2:cb:c5:8e:e3:d3:97:c4:be:f3:70:db:
98:c9:82:c6:e6:6f:8a:f3:a1:f9:2c:bb:d3:7b:a3:
b4:39:1c:48:35:f6:52:a0:a5:89:34:ae:24:ed:d8:
39:56:33:f8:5a:05:ac:f8:9b:a0:5f:1d:34:02:0a:
b3:3a:f1:ec:72:3a:bc:0b:88:62:20:34:31:9a:e3:
c1:75:95:f4:fb:e2:ba:ee:c8:f0:23:f9:2e:e7:09:
5d:81:9a:b0:88:9e:f6:05:d8:e8:85:20:22:9a:f5:
86:c5:59:c6:8e:01:ab:45:40:30:b2:a5:d4:29:86:
86:74:ec:8d:50:ac:fc:c9:9a:29:81:1a:54:f2:0e:
a6:56:10:7c:73:b2:35:13:19:73:29:39:50:b0:51:
12:f2:95:6c:6b:90:e4:3f:c5:ea:79:03:2f:69:94:
93:ba:8b:52:3d:d8:a2:59:af:34:8e:d1:84:41:60:
fa:35:be:6d:da:80:03:8c:2c:07:8d:29:db:f4:d6:
cc:6b:66:c9:e0:8d:7a:9d:14:12:4d:68:63:96:23:
4a:5f:a9:b0:24:0c:98:0a:ba:ec:33:59:f1:76:a1:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:06:50:FF:EF:78:B1:75:EF:61:96:C0:2C:D4:AE:F1:30:5F:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a25335e3-beaa-3254-ac82-38ac0be20761.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:6a:60:8d:3d:c4:e1:c0:7f:47:c7:6c:67:f8:04:75:6e:a3:
a7:e0:7c:c5:59:a5:98:38:68:8a:27:19:f6:1a:71:84:7d:23:
81:22:82:e7:8e:7d:33:5c:58:ed:8c:bb:20:17:20:0e:4e:b3:
e4:bf:4d:01:34:39:f9:8c:2d:d1:d5:76:7a:71:e8:c1:87:f6:
80:d2:24:92:17:54:2b:0e:db:72:77:ad:17:33:15:d1:80:4b:
7c:0a:1f:4d:02:b9:66:cd:aa:f5:43:c3:55:e1:21:4d:b7:74:
56:0a:73:c2:7d:a8:bb:73:bb:e3:94:0d:a2:f0:37:74:8f:7e:
d8:f4:25:33:59:a5:9f:6c:70:4d:62:33:02:0e:b3:ee:7a:d8:
0c:7d:33:c7:f2:fb:35:7c:4e:d7:38:bd:26:d1:38:8f:01:7a:
42:32:f5:36:05:15:d2:b2:e3:fd:a5:a2:6f:da:86:d8:6e:a8:
96:73:4d:d9:29:1d:0d:37:cb:8d:ef:7c:c3:4e:26:31:74:05:
77:25:de:1a:4b:22:87:c1:6f:36:20:ee:0b:b3:f6:38:df:5c:
13:8e:b2:40:04:5a:ce:69:56:41:01:9f:ab:a2:ce:70:91:72:
24:08:3c:a9:0f:40:4d:07:f0:7c:1e:2d:a4:c1:e8:b7:10:fe:
8e:1b:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:23:32 2025 by rpki-client