Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9e9e6c3-bc18-395e-a4d7-a374d9e24818.roa
File: a9e9e6c3-bc18-395e-a4d7-a374d9e24818.roa (raw, json)
Hash identifier: 7L2omCWhm8dLKjLh2GTB74a36OxXr0XnfCjkMrsEqvo=
Subject key identifier: 70:89:8A:3A:12:F9:86:A0:DA:32:04:4F:FA:D4:D0:AA:A4:55:DD:67
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F8CF020D22D99073B60F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9e9e6c3-bc18-395e-a4d7-a374d9e24818.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.77.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:cf:02:0d:22:d9:90:73:b6:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=954d59fc-b098-467a-ae65-3cf51e468a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:89:64:91:fb:19:65:02:97:85:38:e1:87:
c2:e1:7c:cb:97:a0:86:8c:fa:fc:00:b0:32:7c:78:
66:81:49:eb:53:1d:93:91:6f:58:22:19:c2:01:9b:
71:db:dd:df:19:01:e3:e6:ec:55:90:12:50:c4:60:
d3:6a:32:0e:74:9d:61:46:c6:05:01:b1:b6:2d:06:
c6:85:78:55:c8:69:f5:c6:0e:75:72:09:d5:41:fe:
c3:ea:33:bb:da:c7:a3:c6:81:94:42:7d:8b:ec:fb:
23:47:ba:55:c0:85:82:6b:ef:57:99:8a:3b:3f:5a:
95:ff:ad:de:7c:83:a8:91:77:5e:9e:ba:c9:6d:7a:
54:9a:1b:df:61:84:29:7d:d3:f5:d8:25:0d:a1:57:
7d:d3:dd:8e:6e:62:8d:ec:bb:7d:f6:d1:1a:20:5c:
25:c4:6d:d3:3f:3f:4c:7a:22:ec:79:f9:83:72:9f:
b5:56:42:84:22:1e:00:28:3d:01:cf:5f:18:09:b3:
43:13:7c:82:cd:08:c4:94:fd:a2:44:2a:a0:d0:ff:
bd:e8:77:75:61:fe:95:8b:0d:f4:c4:20:c4:84:57:
4b:31:0b:e8:d8:94:b1:61:a1:92:bf:87:2b:c6:14:
a9:84:85:5e:18:53:3f:69:6c:ee:fa:a6:5d:3d:05:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:8A:3A:12:F9:86:A0:DA:32:04:4F:FA:D4:D0:AA:A4:55:DD:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9e9e6c3-bc18-395e-a4d7-a374d9e24818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.77.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:40:43:94:ea:e3:1f:1b:51:25:20:45:65:09:66:38:9c:b0:
ea:5d:58:43:70:2f:aa:e8:96:be:d2:1b:a1:30:4e:61:e0:c9:
38:77:e5:af:9b:fd:b0:a2:14:fa:44:38:c8:d4:5a:46:91:df:
89:1c:5a:6b:7b:68:55:5c:89:2f:26:20:be:47:54:77:ab:56:
4f:e9:d1:93:38:8e:63:b2:3d:52:f6:ce:a4:54:c7:af:c3:de:
b7:17:90:84:1d:6d:21:b7:2f:81:22:89:f5:c6:32:c1:bd:d8:
ea:da:02:34:6a:6b:b7:25:cf:1d:85:67:97:ae:f1:e0:66:a5:
72:fc:98:2f:d9:da:30:a6:5b:38:d8:48:18:92:b4:20:a5:d2:
80:09:7a:c6:ee:dc:a7:17:5c:28:ab:71:3f:6e:67:c2:48:22:
35:9b:85:f3:b3:06:45:c9:e0:ea:c3:cf:eb:14:99:f3:35:72:
5b:ca:fb:b5:6c:4c:ce:35:db:79:06:9d:59:d2:2d:ed:c9:66:
ae:cc:65:ce:dd:61:3d:05:48:b0:5d:df:d1:f4:2b:76:f3:20:
b6:a8:3e:b3:06:8c:f4:da:67:3d:53:9e:26:ec:5c:1b:e0:18:
9c:f1:b2:9f:40:05:b2:e5:50:d1:a7:4f:f6:56:c6:3c:f0:1e:
ea:32:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:41:48 2025 by rpki-client