Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa277ecb-5d3b-3e80-af6c-7858693da544.roa
File: aa277ecb-5d3b-3e80-af6c-7858693da544.roa (raw, json)
Hash identifier: 6euErVEtMFsC0qZjRCYnpXlU2gVHL/1G9Ny7ZurYEyg=
Subject key identifier: 99:47:A5:FE:E9:86:12:85:10:5C:65:18:4E:80:EF:9C:F3:B0:CF:07
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8CD1D80A9B65840495D1700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa277ecb-5d3b-3e80-af6c-7858693da544.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.146.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:cd:1d:80:a9:b6:58:40:49:5d:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=6375abf0-6713-4933-b9f5-d9b46e1c9b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:da:d1:82:c8:30:c2:0f:2f:8d:fc:3f:3a:
00:ec:24:db:0c:66:e9:a3:89:ec:9c:0c:e3:13:18:
ec:ec:6b:4d:d6:f7:71:54:6c:1e:41:3d:47:5c:a1:
08:18:58:91:c5:42:2c:d4:b3:32:93:71:4b:7c:2c:
ab:bb:38:a5:6d:9c:79:d5:3d:2f:c1:7d:46:ed:15:
e4:11:2a:c0:63:62:76:8a:90:67:e2:0f:90:68:44:
e4:cb:c7:e1:57:cd:53:aa:2c:3a:2e:53:bd:fd:fe:
5c:3d:6e:88:11:c0:9a:8f:c2:28:c0:97:5d:2a:e3:
1c:80:90:cb:cd:51:79:c8:01:83:91:82:0d:44:fb:
55:c3:d4:ae:78:da:7d:b1:6f:6c:64:21:46:25:f9:
bc:07:c6:52:40:35:d9:1a:87:0f:6f:91:c1:02:12:
0e:22:46:44:1b:fa:93:cc:c9:e5:56:65:1a:8d:04:
ef:fe:c6:cf:c8:8c:20:b7:40:c5:35:dc:98:24:57:
fa:1e:d9:dd:5b:b4:bc:3a:97:11:aa:30:9b:bd:fc:
e3:70:6c:02:5e:93:f8:7d:1f:bf:af:68:d1:57:c9:
05:66:99:b7:a6:82:c7:4d:10:51:f5:24:35:3c:6d:
3f:a3:16:91:35:fb:2a:53:49:90:d5:43:69:1b:72:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:A5:FE:E9:86:12:85:10:5C:65:18:4E:80:EF:9C:F3:B0:CF:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa277ecb-5d3b-3e80-af6c-7858693da544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.146.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a8:a0:26:f7:2c:d2:ef:50:e9:49:f4:f9:d3:47:88:34:65:
6c:1d:3b:96:19:7d:aa:71:ac:21:03:3d:b4:3c:21:9a:4b:58:
27:aa:69:08:93:e2:a4:3e:27:db:1f:6f:26:3b:ac:c1:a1:80:
18:42:a0:d1:11:18:f6:9d:22:03:ac:3d:de:7b:51:2c:bf:5c:
55:b8:06:8c:3e:92:23:c6:8b:fe:c3:06:17:19:90:3d:cd:e7:
ce:11:3f:99:00:14:02:6d:6b:07:e5:1d:58:e5:e3:69:6e:03:
c4:79:0f:2d:ac:ae:62:fc:f2:61:dd:7d:00:02:24:27:f9:9f:
e3:6e:83:ed:71:85:31:60:10:6f:7e:31:f8:05:a7:70:1f:16:
22:f4:06:c7:d9:c2:8c:13:06:fb:38:30:46:fb:2f:09:4d:28:
d9:c3:9a:fd:c5:e6:04:9c:47:4e:18:eb:85:c9:53:8e:7c:1d:
31:d9:25:51:60:18:a0:00:0f:e5:68:a4:58:88:ce:27:13:c8:
e9:fa:d8:e6:40:70:e7:4d:77:f6:ac:91:7d:69:54:52:dc:59:
b9:49:54:d3:4f:c6:81:24:0b:c8:ff:46:6f:97:05:14:e3:b8:
a2:7c:46:2a:99:cc:0e:3b:60:55:cb:31:dc:2e:24:85:54:40:
41:cc:f1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:44 2025 by rpki-client