Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa13b5ca-28f8-3dff-accf-da7915d2e555.roa
File: aa13b5ca-28f8-3dff-accf-da7915d2e555.roa (raw, json)
Hash identifier: r1lYntDo6MxVhIjbA23enp6RkxiuuZN3n+BciQDvScU=
Subject key identifier: 68:21:96:32:57:EF:17:68:09:FD:E9:5A:ED:CF:E6:B1:25:CF:AC:27
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A13895806C0E007C85ECC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa13b5ca-28f8-3dff-accf-da7915d2e555.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 34.145.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:38:95:80:6c:0e:00:7c:85:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=290fbe8b-768b-4130-b62f-83fbd3df8c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:91:70:c3:6f:f3:41:e0:3a:27:23:cd:c1:
7d:7a:df:58:e2:4d:1c:2c:f2:c2:f5:78:c9:af:69:
3e:7b:08:4d:81:8e:4f:48:fb:4e:ea:c4:b4:4e:5d:
c6:d9:53:c0:f1:1d:9e:ea:85:37:72:4d:3d:0e:b2:
a9:9e:56:cf:e5:37:c7:63:59:11:4e:18:25:37:a7:
08:52:91:54:92:bd:43:5d:38:7d:01:2d:e8:4a:cd:
b9:3d:fb:2b:a7:0b:d3:08:ac:00:e9:04:65:f1:76:
8d:5a:c3:f2:d0:54:5c:84:51:c9:bd:4c:26:aa:e1:
d2:34:08:44:fd:62:a9:71:91:a8:af:cc:2e:19:a5:
e5:e7:9e:5e:73:72:f7:42:50:2f:c4:69:0d:73:1b:
ae:65:ef:35:7c:e8:05:76:6c:48:a1:a8:9a:59:07:
eb:eb:77:ac:9a:55:54:28:8f:85:e3:bc:6f:c5:ed:
0a:55:16:29:46:03:53:e0:fc:1c:20:e3:97:1d:d8:
7e:b9:16:56:75:c5:67:f9:37:16:d5:c4:07:03:76:
f4:01:42:e9:92:a7:76:bd:10:c7:dd:ba:65:53:73:
7d:ba:20:af:50:d6:b3:4d:a1:ca:7d:48:62:f5:3a:
24:ba:8f:9e:77:ee:d4:c7:b0:2f:fd:61:19:28:49:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:96:32:57:EF:17:68:09:FD:E9:5A:ED:CF:E6:B1:25:CF:AC:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa13b5ca-28f8-3dff-accf-da7915d2e555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:7e:a8:0f:98:42:9d:1a:79:10:1c:50:3d:06:1f:81:48:97:
f2:58:8c:b8:91:f0:8d:eb:08:2e:96:70:b7:da:64:53:17:ad:
7a:6f:46:ee:47:c1:38:95:e7:0b:7e:07:c0:f3:ef:5a:82:e8:
8e:00:20:22:6c:8a:6a:0f:47:f4:f4:f8:3a:3f:e4:45:12:95:
83:c3:54:6d:db:df:24:07:d1:0e:14:ab:7a:3d:04:27:25:06:
e1:4f:51:5c:80:10:25:f6:72:ff:d5:a9:64:db:53:fd:82:15:
62:63:c9:fe:ca:c8:7d:eb:56:ca:d9:8d:61:93:5e:7e:9b:14:
0a:0b:f0:8a:4e:ad:6e:cc:2b:a9:55:a2:d8:99:0e:13:58:97:
bf:34:3c:67:f1:90:63:d0:2c:35:ea:95:e5:c6:d9:4e:40:69:
8b:06:4f:e6:3e:50:d8:67:f8:71:b0:31:52:29:60:60:a6:f4:
e6:d8:f3:b7:3e:34:57:a2:de:e9:29:7a:3b:c1:48:9b:df:c6:
58:e8:ff:7c:62:98:77:3b:7a:08:4c:fa:d6:19:b0:05:4f:aa:
68:48:85:de:48:d2:f2:87:38:9c:e7:97:08:2b:5a:f1:e9:ab:
a3:c4:4b:3f:17:62:68:3a:03:78:ae:a9:e4:41:ed:d3:b9:32:
b9:19:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:55:35 2025 by rpki-client