Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/baa21c00-76a2-34bf-94a9-6e98ac97f99a.roa
File: baa21c00-76a2-34bf-94a9-6e98ac97f99a.roa (raw, json)
Hash identifier: 2VAatec1B/4Tn8Wy5uoy2gOUk+MLdvqVFDO8JhItbqw=
Subject key identifier: 2A:0D:5A:69:92:E2:B3:A3:30:29:77:A6:F1:9C:0D:4A:0D:07:78:3A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE85DEC1F9060C52D1CA6880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/baa21c00-76a2-34bf-94a9-6e98ac97f99a.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Sun 29 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.154.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:85:de:c1:f9:06:0c:52:d1:ca:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Sep 29 04:00:00 2024 GMT
Subject: CN=624b6f9a-e416-447c-acdf-162594b2685a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:ac:fd:2a:48:57:6e:e3:71:28:2b:d2:c8:
07:9c:d4:0c:44:ec:87:bf:07:f4:74:d4:56:50:c1:
13:76:c1:38:81:3a:d0:5e:b8:51:15:88:2a:9d:5e:
32:74:5a:4a:b2:ea:9c:be:82:32:00:30:a9:a6:86:
7f:d9:13:6f:24:23:02:0d:37:1c:ea:fe:83:61:4b:
9b:44:dc:61:41:63:a1:20:cc:4e:4f:d4:03:11:9a:
45:0e:bd:d8:ba:1b:38:79:3b:77:cb:cc:9f:b7:61:
b2:00:d0:f5:be:56:a5:e0:d0:27:ba:15:7e:e4:7b:
95:46:d9:bd:85:17:a6:7e:60:a8:36:48:34:d1:53:
64:66:cb:d7:df:dd:79:54:cb:aa:a8:c2:90:71:e3:
89:0e:0a:90:96:d8:65:a1:a9:a1:fb:3c:46:d7:e1:
11:8b:9d:2a:87:d9:de:cc:d4:1c:7a:61:c0:6d:c1:
c0:3b:9d:6b:91:67:c3:fd:ed:e9:aa:ca:93:38:24:
22:68:8d:63:0f:50:25:ed:9c:a2:8f:b9:43:e8:94:
e1:fd:fd:1d:4b:5e:dc:ec:16:52:1b:b8:be:8e:25:
0b:30:1b:15:f8:63:2e:13:d9:41:2c:0b:28:cb:23:
5a:81:e7:bd:cb:65:c0:00:9c:0e:80:4e:2b:fe:8e:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0D:5A:69:92:E2:B3:A3:30:29:77:A6:F1:9C:0D:4A:0D:07:78:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/baa21c00-76a2-34bf-94a9-6e98ac97f99a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:3e:db:23:3b:21:b3:9c:a4:82:41:8a:ef:15:7d:a0:ef:65:
65:cc:a8:2e:5c:df:90:35:f6:c1:fb:56:a3:30:55:80:4b:03:
13:2c:c7:01:5a:79:4b:01:93:0c:8a:21:42:cd:39:bc:db:02:
c6:16:0d:0c:cb:91:5d:e7:71:63:d6:4d:15:79:c9:cc:a8:f6:
30:ae:56:d5:50:93:2e:c6:42:6a:9d:23:39:2f:06:3a:4f:f8:
4e:02:48:b1:e1:c4:e4:56:bc:de:2c:25:e8:33:3c:4b:8b:af:
10:7c:ba:bc:be:85:9e:05:63:72:99:5d:6e:13:0c:e9:01:76:
6c:b5:3a:ea:b6:83:3c:89:a3:e8:f3:fe:b7:3d:d6:5a:66:72:
0a:bb:31:ac:fe:52:c7:88:bb:3a:d6:02:a2:cd:c2:02:b1:f8:
a7:04:0b:f3:65:66:80:a3:d8:b7:fb:bf:a1:58:d9:5a:c6:17:
be:fc:42:1c:dc:7e:45:85:34:00:13:b9:5f:50:04:19:e5:2e:
e8:97:70:03:45:dd:ad:f2:65:ca:4d:ff:0a:f9:86:dc:76:de:
3c:44:7e:6d:7b:3f:77:81:6c:17:2b:61:05:87:9d:89:9f:83:
f8:09:f8:be:a6:6f:78:52:fd:5b:b6:4a:85:45:11:dc:c9:ad:
4a:a8:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:59:13 2025 by rpki-client