Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b517fbef-6492-3830-9ad0-e9617ebb6923.roa
File: b517fbef-6492-3830-9ad0-e9617ebb6923.roa (raw, json)
Hash identifier: d9eYmWCzCOckqck4eK8GP7jSQlnYcWLsfWtVv+uIVgg=
Subject key identifier: C1:89:D0:CD:18:66:68:DA:32:CD:F8:80:F3:26:95:61:84:E2:DE:9B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C1C91ED5D06A3483468840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b517fbef-6492-3830-9ad0-e9617ebb6923.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.105.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:c9:1e:d5:d0:6a:34:83:46:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=5514729f-55c1-4ad7-88c1-5936e43d0e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:2c:bc:4f:00:37:e3:ca:2e:99:d5:8e:22:
e6:b5:76:4c:62:58:85:0a:ee:cb:c9:48:67:34:e4:
78:70:60:c7:96:b8:d2:31:2f:8a:64:80:fd:32:89:
62:3a:90:6e:cb:e0:31:e3:ba:da:6b:27:54:c2:29:
22:b9:e6:d4:3f:10:2f:7f:10:1d:e8:46:93:cd:0e:
8e:c1:2a:d6:28:7f:b8:0e:72:0b:b8:e0:5a:84:5b:
e0:40:cc:a8:c0:64:75:b5:b0:04:ee:76:7e:3e:47:
10:44:37:d3:1f:6f:d9:0c:95:f4:d4:f1:26:6d:af:
11:cf:89:c2:24:01:1b:25:25:b1:81:92:29:8d:53:
af:6e:b4:2c:1e:35:b7:12:35:13:e0:22:eb:99:25:
9f:cb:58:02:15:60:0b:70:44:df:f4:80:6e:7b:70:
4e:25:fd:46:62:74:10:77:08:78:5a:5b:7a:86:d5:
61:75:97:1e:0e:90:12:07:c0:96:3d:dc:d0:de:96:
ab:86:35:c5:f9:9a:c0:ac:b7:c7:1f:de:8f:6a:fe:
31:d5:85:d3:67:21:23:45:49:9b:fe:6e:f9:46:9f:
33:29:92:e9:72:a5:70:f2:56:50:bf:7e:4a:48:ac:
25:20:bf:9f:c0:77:0e:30:3a:98:2a:ff:55:c4:de:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:D0:CD:18:66:68:DA:32:CD:F8:80:F3:26:95:61:84:E2:DE:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b517fbef-6492-3830-9ad0-e9617ebb6923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.105.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:19:ff:13:c8:02:48:ae:26:08:25:e1:d1:c8:2f:10:7a:3c:
35:26:f1:2e:4d:c5:3a:ef:c1:e1:89:7c:9b:3a:76:d4:15:ae:
69:1b:7f:4c:c7:39:96:54:5f:23:a3:0f:75:ac:74:5a:95:98:
21:9a:0e:37:41:c8:23:2b:31:16:18:52:ed:ad:b1:57:d1:b8:
dc:5e:37:b4:c9:54:89:6c:31:b9:f2:84:6a:d5:c1:98:fd:6c:
64:a0:f4:a4:52:aa:d7:34:89:83:14:f7:ef:4e:96:78:6c:e3:
76:0e:5d:72:d2:5d:d0:63:12:bf:cc:4a:8b:4b:1b:f7:0e:8c:
35:05:e9:12:9f:72:a9:05:5d:aa:c9:e9:9a:1b:f8:d6:64:c7:
1d:52:0e:1e:53:83:72:b7:35:96:09:f7:03:b1:db:4e:31:98:
ea:6e:ab:1d:09:dd:2c:fa:67:61:a4:7f:60:8e:51:98:8f:76:
c8:fd:a2:0f:9a:51:81:88:f5:f8:f6:ec:ea:67:40:f4:84:ea:
47:18:c0:17:df:2a:df:91:82:28:05:2f:3a:29:db:16:c1:61:
1e:ee:e9:5b:0a:b4:7f:bc:ac:be:17:49:fb:53:4e:c2:67:6a:
be:86:1f:ce:b6:ca:b6:1e:01:5c:3f:67:4f:ac:8c:bc:95:51:
5c:a3:e7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:56:41 2025 by rpki-client