Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b627523a-e76e-36f3-a6af-ff45f76369b9.roa
File: b627523a-e76e-36f3-a6af-ff45f76369b9.roa (raw, json)
Hash identifier: NrzPxdoQattbrGxDIk6AEWcsQlezcoQ3tlF2ahh6F/E=
Subject key identifier: 0A:53:57:36:08:74:92:4F:16:69:E2:D1:1C:58:43:47:5F:98:25:AD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A160ABCA5C9EA12DC2B8E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b627523a-e76e-36f3-a6af-ff45f76369b9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.100.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:0a:bc:a5:c9:ea:12:dc:2b:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a2857aec-ba8d-4037-9c75-faae4e9a6df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:ef:d0:b2:41:d3:73:b2:8e:d4:56:50:20:
cc:97:3a:1a:7e:ac:dc:46:01:e2:1a:28:5f:b2:b0:
ae:6a:e3:01:d9:ed:82:f8:9b:78:62:99:7c:71:b4:
7f:28:ff:ad:d9:e3:39:84:f6:d2:54:42:25:34:51:
31:b9:25:1b:be:e3:e9:40:6c:b2:70:dd:53:bb:f3:
b7:21:b2:d2:29:45:70:51:75:0e:3c:1b:7f:bc:51:
62:8c:77:1a:86:c0:9d:02:03:a5:de:25:23:b1:10:
7a:94:17:26:7d:c4:79:01:b4:63:02:c9:12:50:75:
01:33:8a:0e:5e:52:65:47:38:84:cf:e1:92:4a:69:
dc:1b:b0:33:da:7d:b1:f5:8f:1e:98:b8:13:43:1d:
6f:21:41:96:19:20:e2:d3:1a:fc:c2:f3:31:bc:26:
d9:f9:42:b7:96:1c:c0:9c:ee:0f:84:65:0e:9e:99:
da:dd:38:01:e5:fb:d3:82:5c:d1:ea:63:21:2e:ca:
1a:5a:a4:75:7d:b0:72:7a:65:bd:44:21:d6:a5:19:
1f:a8:a5:5b:96:76:35:e3:96:5f:b7:65:dc:31:ca:
33:ce:b4:fd:a8:bd:51:3d:02:85:2a:45:c3:54:ae:
d6:07:7f:ec:0f:c1:40:ea:95:36:e5:c8:96:c3:7d:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:57:36:08:74:92:4F:16:69:E2:D1:1C:58:43:47:5F:98:25:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b627523a-e76e-36f3-a6af-ff45f76369b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:63:d8:e9:17:f1:00:6a:df:93:63:63:af:55:d3:a6:86:dc:
75:58:47:eb:35:33:6b:b1:f8:ac:a2:3d:c2:cd:27:8c:ad:00:
92:3a:13:da:b9:a5:b8:ca:cb:2a:ec:2e:d1:b1:c7:f7:db:a0:
f0:30:ff:9d:fe:43:2e:95:61:73:b5:23:31:d4:57:ab:dc:69:
b7:bb:67:a9:29:99:a9:b3:4f:4c:9e:88:70:4a:a6:6f:e8:31:
99:81:91:5f:5d:d9:e6:26:fb:09:c4:3c:e0:bf:cb:1c:5c:76:
01:73:c6:fd:27:c3:58:19:9f:af:1d:09:58:f1:a6:2b:b3:0d:
ad:32:11:15:57:70:3a:b0:54:65:a6:71:84:dc:62:9a:e4:08:
af:57:2b:4f:49:a5:75:47:bf:a3:8f:5c:97:c1:e5:1f:5d:fd:
60:c5:02:b4:f2:4e:ae:75:5b:3a:7b:b1:89:4c:28:28:bd:f4:
7f:e8:9b:e7:cf:57:74:5b:1d:16:70:65:6c:6d:45:08:52:98:
9f:64:8a:34:26:70:0a:aa:85:71:c8:9b:fc:64:f0:e0:58:9f:
6f:06:96:98:b5:71:87:b2:42:9d:8a:92:31:06:a0:d4:97:f2:
e8:4e:7c:d5:ad:9b:4d:44:47:b2:b0:b7:0e:59:df:94:d5:e7:
47:5f:85:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:41 2025 by rpki-client