Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b24e2100-9a6a-3b5c-8cbd-eac76a15f61e.roa
File: b24e2100-9a6a-3b5c-8cbd-eac76a15f61e.roa (raw, json)
Hash identifier: 7OKmtaw91be5te93QJFeYTY2xdnWJR4q0ce82zYh3bQ=
Subject key identifier: 3F:1F:00:63:BD:83:F6:27:18:E9:B2:3F:11:E0:48:FB:B3:24:2E:41
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583E25A6AEE88D0504AFACD74A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b24e2100-9a6a-3b5c-8cbd-eac76a15f61e.roa
Signing time: Sun 05 Jun 2022 12:00:00 +0000
ROA not before: Sun 05 Jun 2022 12:00:00 +0000
ROA not after: Sat 07 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.4.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:25:a6:ae:e8:8d:05:04:af:ac:d7:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 5 12:00:00 2022 GMT
Not After : Sep 7 04:00:00 2024 GMT
Subject: CN=e66d2252-ba07-4a4d-b12e-a72b52d1228b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:f0:c3:11:6d:85:e8:d4:1f:56:d0:b5:d2:
eb:3a:ee:95:b7:2f:75:b2:a0:e2:a1:a5:03:92:8d:
23:85:f0:b1:f5:26:0b:1e:af:25:f2:54:64:b6:ec:
10:77:43:b3:ec:ca:39:e4:7b:c3:cf:43:4d:7c:3d:
bb:aa:85:92:b2:26:e0:7c:ef:1d:8e:b4:58:6c:4c:
86:27:e0:bd:df:1c:e1:12:29:0d:87:2b:78:e0:36:
4d:85:ac:1c:18:27:aa:c3:60:e3:f3:1e:2c:44:dc:
66:3b:5c:57:b4:a1:52:0e:c4:eb:87:1e:b8:29:14:
0c:ff:8b:7e:76:9c:bf:87:cf:e0:e8:b5:e1:ba:a6:
e2:cf:d2:f8:e1:cf:63:53:48:b2:26:17:bd:fa:a6:
2b:b3:dd:c3:a7:2f:d5:d3:86:a5:9b:7b:e8:54:e6:
c8:dc:e9:06:49:30:8f:18:4d:de:34:c5:b5:8c:ed:
8e:90:03:0d:f6:9d:ed:36:f4:8f:70:8f:8b:0a:0c:
ad:50:a8:75:96:72:0a:4e:28:1d:b0:1a:bc:da:ac:
e8:ba:ee:39:71:20:fe:33:b3:bc:af:91:3c:9e:0d:
63:d7:31:aa:b5:65:05:05:ed:0e:35:f9:81:29:b3:
52:15:e1:46:8e:e1:32:22:7f:e7:ac:8d:20:6a:a8:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1F:00:63:BD:83:F6:27:18:E9:B2:3F:11:E0:48:FB:B3:24:2E:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b24e2100-9a6a-3b5c-8cbd-eac76a15f61e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.4.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:76:a2:e9:ab:01:50:dd:23:f0:6d:13:a3:80:2d:e2:bf:74:
11:13:47:ed:89:7b:99:83:e0:dc:d6:b9:f7:40:df:eb:34:4c:
29:02:8d:39:6f:44:69:63:dc:6e:3a:45:b2:a3:24:47:13:27:
60:62:16:3b:2d:c7:76:1f:69:1c:2c:8c:49:e0:fe:da:6b:5f:
bf:62:4d:56:08:9d:60:bf:06:de:10:cb:ee:51:b8:66:4c:06:
c8:a6:e5:4a:76:93:2a:93:0d:82:96:81:34:83:51:a8:58:bd:
77:67:84:f1:f0:82:a1:83:4b:a0:e9:71:e1:9b:d4:bf:29:ca:
15:74:db:8c:a8:a0:2b:f0:4a:72:e3:aa:8f:c8:bb:36:56:53:
84:5a:8f:33:1a:02:c6:6a:aa:eb:37:db:de:71:23:f5:c5:ff:
a9:d8:dc:91:0a:9b:5f:67:36:e3:4e:be:60:20:46:9c:de:fd:
fa:b3:d9:d4:3d:b9:b7:bd:a9:3e:9d:f0:56:88:d6:3f:36:11:
9a:f9:45:21:77:e0:bc:2e:42:84:4d:af:45:6e:51:6f:0f:49:
03:26:8b:57:b3:31:69:b8:c5:f0:42:71:58:89:ad:9b:ad:e7:
fe:7d:11:1b:2c:62:02:c0:d3:0c:6b:bf:1d:de:52:63:be:e4:
4a:8e:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:17 2025 by rpki-client