Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9c0b806-e1cf-3e4c-91de-08e6db9e3446.roa
File: a9c0b806-e1cf-3e4c-91de-08e6db9e3446.roa (raw, json)
Hash identifier: Di0E0WCd0sCLB/qAVpuaovWGcK/5yla4kkl4tT4VvUU=
Subject key identifier: EC:85:64:B6:C9:86:71:EE:38:91:E2:0B:A5:CA:CC:30:96:CE:F6:61
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A672E44D5E83672BD2180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9c0b806-e1cf-3e4c-91de-08e6db9e3446.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.148.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:67:2e:44:d5:e8:36:72:bd:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=02475a47-1c66-47e3-b11d-6f759a0607b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:25:07:49:e7:9f:15:6e:1a:ce:28:39:21:
46:82:5f:e2:62:c8:af:c2:e7:51:2e:47:84:ee:70:
85:45:ed:f7:4d:00:d0:e2:be:6c:9f:85:9e:79:a0:
1a:ea:45:ea:ab:29:7b:99:66:8b:16:ee:1a:16:47:
85:29:e3:21:c9:7d:87:23:3e:35:64:ea:ee:b8:f1:
32:b0:92:72:df:c8:1d:ed:b8:16:dd:6c:b1:b6:43:
eb:50:3c:b0:d2:8e:7f:bd:5b:e0:5f:ea:7f:16:5f:
ba:81:cf:8e:70:c3:dc:e9:a0:91:4d:d5:ee:8b:37:
8a:91:91:a5:f7:69:43:16:6e:36:ea:43:43:ec:4c:
d2:fc:0a:9c:7d:32:8c:ba:78:2d:90:64:03:ef:33:
50:62:d9:8c:3b:80:b6:2b:4a:c6:11:60:aa:a5:30:
6d:f9:2e:d2:a5:a0:d5:56:0a:6c:48:a0:49:e2:0c:
23:5b:8a:5e:b2:3b:f8:23:76:94:7f:0b:a4:bf:32:
ac:81:1a:8c:d3:a3:02:f7:a2:22:b7:a7:b4:4a:6a:
7b:9b:04:98:a4:85:ce:56:a7:29:ee:4f:d4:ef:7c:
03:be:d0:0c:03:f3:73:ce:60:32:43:63:fa:95:57:
2f:1d:7e:a8:05:1e:ae:00:83:31:8f:b6:e1:fb:4b:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:64:B6:C9:86:71:EE:38:91:E2:0B:A5:CA:CC:30:96:CE:F6:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9c0b806-e1cf-3e4c-91de-08e6db9e3446.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.148.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:f6:a0:88:0a:f0:f0:b1:56:f8:12:14:9e:c0:d0:fa:5d:eb:
b5:e0:26:94:50:2e:90:1a:92:00:4f:f4:f8:31:66:ee:22:49:
ec:42:78:0a:87:ed:98:8d:fe:fa:37:42:91:83:13:89:34:4d:
c5:d8:66:32:7d:49:89:15:29:85:4b:45:ab:66:eb:5e:0a:f5:
2f:df:dd:2c:48:ce:cc:cc:b3:0f:0f:77:21:a6:43:53:0f:f0:
40:f9:4b:81:3d:be:0c:50:af:3e:cd:ba:f8:64:6d:af:9e:ae:
77:cb:7d:0d:ec:4d:5d:4b:74:27:c6:b8:27:fd:21:29:73:dd:
5d:01:5f:f5:04:b3:d6:8b:c8:9e:87:5a:3c:a5:dd:50:02:4f:
ed:6b:16:22:a1:41:15:43:09:8c:b6:c9:56:f2:9a:23:78:ef:
ab:89:7b:cc:f0:e5:53:23:e5:3e:15:ad:c7:a6:52:7d:89:02:
13:74:b2:39:3f:7e:fc:d3:03:05:a4:86:09:9f:dc:10:78:aa:
72:29:a3:d2:bb:09:74:f6:7e:32:42:ba:eb:ae:cf:51:2d:f4:
fa:cd:48:87:f5:ad:7c:74:cb:03:bf:5f:9c:e7:12:f7:05:af:
86:0e:c7:7f:8b:bb:f6:49:23:02:d3:72:2b:aa:4d:15:f7:a5:
e8:1e:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:31 2025 by rpki-client