Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5609469-eaa3-325f-8cb0-a4601baceb53.roa
File: a5609469-eaa3-325f-8cb0-a4601baceb53.roa (raw, json)
Hash identifier: keQErBgsjqAE7KYmCK+R6w2FXEbxm5cc7VkRhiHf8DU=
Subject key identifier: 10:2C:52:AD:13:5D:C3:6F:AE:E8:39:33:80:60:5A:B4:50:E5:00:7F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584216DDA746D0871590CFBBA940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5609469-eaa3-325f-8cb0-a4601baceb53.roa
Signing time: Thu 01 Jun 2023 12:00:00 +0000
ROA not before: Thu 01 Jun 2023 12:00:00 +0000
ROA not after: Sun 13 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.128.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:16:dd:a7:46:d0:87:15:90:cf:bb:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 1 12:00:00 2023 GMT
Not After : Oct 13 04:00:00 2024 GMT
Subject: CN=856e3ed1-b193-405c-aec8-f81734b585c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:27:ee:02:84:e7:ff:12:fe:4a:cc:f8:63:
b2:36:52:86:8a:ad:ab:b9:38:1c:24:10:c3:f0:51:
7b:62:87:18:fe:62:15:3c:46:26:a3:25:40:96:39:
02:66:08:7e:cc:fc:7b:26:22:6e:28:af:e0:8d:cd:
94:da:80:87:66:d0:02:0f:e9:21:23:a9:5e:89:80:
64:aa:5e:f2:cc:2a:77:8a:70:cc:93:db:29:af:f2:
76:93:1b:a7:cd:66:13:3d:9b:7e:9c:95:06:e0:05:
32:e5:8c:75:86:c0:b5:58:45:2a:8d:b4:ff:d8:d5:
fc:17:d1:5d:69:08:0b:a7:46:46:de:94:d0:5f:55:
39:e5:fa:b5:8f:f0:e5:b2:fb:d9:15:8f:6a:d5:c0:
3a:83:17:9a:02:0e:a6:76:66:43:5f:ab:4d:07:e8:
9d:9d:32:a3:b5:62:32:7d:fb:e9:d1:b0:d6:c0:e7:
50:1d:20:dc:d0:d9:1a:e7:e9:ce:34:a3:f2:85:04:
ea:33:f4:ce:7e:d7:35:aa:1c:d3:33:b1:1e:6c:ad:
5a:46:f0:39:75:07:50:27:cd:04:f2:ba:dc:ea:31:
cf:40:a0:2b:d4:00:42:75:05:32:d2:33:ed:d0:7d:
0f:5c:d9:96:13:0d:bc:79:c3:d1:0a:c3:b0:3d:87:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:52:AD:13:5D:C3:6F:AE:E8:39:33:80:60:5A:B4:50:E5:00:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5609469-eaa3-325f-8cb0-a4601baceb53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.128.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:3f:fc:00:5a:c0:ff:27:ce:6a:de:5e:15:a5:01:04:92:47:
1e:a8:11:8e:c0:fd:1f:dc:e3:15:31:83:c7:cb:86:97:d4:61:
61:61:20:64:a8:3f:16:27:9e:3f:bf:4a:05:49:6d:24:ff:12:
41:d2:fc:03:fc:70:89:f1:20:94:20:b3:ed:81:05:6f:e0:fa:
bc:fb:7f:d1:dd:03:d5:8a:b4:dc:98:21:e4:df:a5:8b:ec:f5:
e1:7d:36:dd:7b:18:28:fa:41:fb:ae:4e:73:ff:04:f8:34:59:
49:58:9f:54:55:39:c8:56:01:03:c0:3d:df:29:4d:df:0d:c1:
0a:c4:89:fb:bd:96:b8:ad:1c:79:50:81:90:b5:f3:1f:02:81:
24:7e:e3:4d:5b:b1:fc:b2:89:24:57:93:87:fc:f0:d2:12:51:
4c:9c:e0:b3:dc:b6:5c:05:3a:25:73:60:38:2f:3b:08:77:8d:
fe:31:61:dd:37:65:3d:b7:68:c1:00:91:be:1d:7b:ac:34:d1:
35:6e:80:91:07:f5:40:db:11:9f:66:5a:ef:c5:78:49:df:e9:
5e:38:ca:b0:54:cd:cf:9e:d2:04:8f:6b:84:1e:96:0f:93:92:
d3:c3:16:ee:84:7a:4c:88:05:f6:1f:13:c3:f2:51:8e:77:96:
58:30:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:46:27 2025 by rpki-client