Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2daffe4-0b48-348a-93d6-de6b2404e60c.roa
File: a2daffe4-0b48-348a-93d6-de6b2404e60c.roa (raw, json)
Hash identifier: VFoynFk1njvN64Htj/ZjDSbMRUhGKcaF/+LLog46o6I=
Subject key identifier: 12:CF:69:05:BE:62:B6:A2:E8:C2:8E:86:B9:1E:75:7F:88:75:0B:5F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FEBAE2BBE95134480D78C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2daffe4-0b48-348a-93d6-de6b2404e60c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.104.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fe:ba:e2:bb:e9:51:34:48:0d:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=453ae1a5-1bc7-4e65-a018-0cf30f0b520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c4:8d:19:16:08:01:3f:5b:f5:3d:99:bd:94:
ed:5e:28:a0:13:ba:64:1b:5d:fd:a3:a9:ae:62:dd:
ba:f6:05:02:1b:35:f2:52:36:f3:45:9b:2d:48:b4:
3b:2c:ef:f5:ed:dd:82:28:c7:27:c2:17:6e:d3:fc:
42:56:f7:38:d9:c9:27:06:a6:be:cf:56:91:c9:7f:
ae:c9:58:79:d2:ea:f3:f7:13:10:50:5d:d1:82:b1:
ca:ed:61:83:f2:59:b8:33:01:a6:1d:6f:20:78:eb:
b4:5c:8d:30:e4:6c:8c:1a:1e:84:81:39:5e:9b:3a:
2f:ff:04:ab:c6:88:04:fa:f9:f4:c9:04:76:e8:72:
26:d1:60:92:4a:c7:2a:8a:e6:d0:c5:0b:77:f4:5c:
a9:6c:45:1e:7d:de:36:33:a5:6d:00:cf:5f:89:58:
89:f3:8b:f7:be:73:6b:1a:53:48:5c:12:aa:65:b4:
81:d6:d6:af:58:a4:0c:04:ef:83:cc:a4:c5:1c:d4:
8b:b8:6c:b0:e7:e9:85:58:d4:89:71:f2:31:6e:7a:
62:0b:91:ef:b9:aa:7e:fc:a9:03:6f:39:11:a8:89:
6c:63:52:4a:d6:de:c1:74:5f:e2:c5:52:0f:51:79:
9c:fc:b4:fe:e9:d3:9a:6d:1b:63:14:db:a3:88:43:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CF:69:05:BE:62:B6:A2:E8:C2:8E:86:B9:1E:75:7F:88:75:0B:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2daffe4-0b48-348a-93d6-de6b2404e60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:f0:bc:b5:4f:bd:d0:7e:56:e0:4e:c7:53:f7:9a:90:cd:ed:
86:7a:64:4f:47:c0:97:d8:d7:5e:06:c5:05:c5:58:75:0a:28:
6e:f2:db:67:5e:94:52:19:6e:d8:7f:b5:5b:41:8d:c3:37:b7:
01:58:b7:c8:45:a2:06:4f:63:81:de:d2:e2:8a:6f:19:bc:a1:
45:23:71:2f:dc:5f:5c:c6:9e:3a:a0:b7:2d:a8:26:2a:97:36:
b6:ae:54:80:df:c5:cb:26:d7:30:ba:e1:14:5e:4a:d3:fc:db:
c0:0b:d9:94:38:bc:14:ae:db:cb:02:2d:7c:cf:30:b7:c4:52:
ab:9d:6d:64:ba:8b:6b:fa:34:c4:5f:8d:2b:0d:9b:4c:21:5f:
a2:c7:25:58:c9:b5:d8:38:1d:18:cb:fe:49:2c:32:8a:b2:9a:
d3:34:f8:fb:e6:77:5b:a8:24:49:5b:78:31:8f:7e:9e:21:7d:
46:f8:95:10:b4:90:36:d9:28:06:35:c4:eb:80:ba:39:0c:bc:
03:e8:93:f4:7b:08:34:b9:d9:7a:d7:ca:31:e1:5a:6a:6a:d4:
0c:22:b3:7d:f8:24:4b:87:64:99:26:4e:6d:48:20:20:a8:61:
75:48:4e:58:3c:6e:a0:3f:94:25:07:23:58:59:63:5a:02:d6:
d2:07:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:11 2025 by rpki-client