Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc88a174-d9d7-3834-863c-79c0b0a97507.roa
File: bc88a174-d9d7-3834-863c-79c0b0a97507.roa (raw, json)
Hash identifier: QlAuGGaU1A0zQQ6G9+NTRPUOUhYYXDan8Why9Isze84=
Subject key identifier: 2E:43:B9:55:63:C2:57:D8:71:50:40:E6:4A:0A:FA:6E:EC:BF:DF:EC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A13FAEC52F965AC69135E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc88a174-d9d7-3834-863c-79c0b0a97507.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.121.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:fa:ec:52:f9:65:ac:69:13:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9e78ec77-0199-4fe2-831b-e4f41da37b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:61:8e:c8:69:f6:ff:43:5a:f0:82:2e:25:
98:8b:a2:93:18:2b:4d:e1:71:df:ae:82:c5:6a:95:
78:0d:e1:b6:03:6d:e7:98:88:bf:97:89:69:41:8f:
1f:d7:dc:45:1c:a7:46:6d:24:4c:69:51:a4:f3:eb:
e9:91:dd:a4:a4:88:79:2c:d5:38:aa:6a:15:37:c1:
84:39:56:1d:53:d2:ef:66:95:c7:41:b1:bf:2e:d4:
08:a8:c8:62:c5:3e:cf:12:eb:c4:e3:66:42:7b:f6:
0a:3f:aa:e6:b2:f6:2e:e5:c0:cb:81:59:7c:48:04:
c0:84:7f:18:65:8e:ee:4f:95:2f:d5:16:a0:ca:19:
5b:2e:d2:0d:84:e7:4f:11:60:3e:f6:0c:6f:ac:9f:
90:6f:ca:dd:ec:de:df:cd:76:a9:9b:3c:82:ee:b7:
d7:52:d8:f2:13:bc:88:c6:f2:66:48:0d:0a:59:aa:
fb:43:ac:28:81:99:17:4f:f0:b0:cd:77:f2:b5:3f:
57:aa:0f:31:c5:57:99:88:4a:7a:15:13:70:89:4d:
30:77:8f:8a:fc:84:44:2c:5f:34:e0:83:86:9c:d7:
4d:b4:bf:ed:5d:06:54:00:27:9f:ac:fb:de:25:eb:
0c:0d:39:73:94:11:45:fb:ff:cc:04:57:79:82:c6:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:43:B9:55:63:C2:57:D8:71:50:40:E6:4A:0A:FA:6E:EC:BF:DF:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc88a174-d9d7-3834-863c-79c0b0a97507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.121.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:a8:81:40:5d:10:6d:c2:3a:18:d9:09:db:dd:64:4c:49:05:
23:08:45:52:34:82:e2:6e:9d:2a:70:94:88:fb:49:d8:10:b2:
c2:b0:ee:fe:f3:47:ea:41:45:f1:f5:a8:f7:4d:82:ff:5b:a7:
5d:9e:28:a3:7e:fd:1d:cf:1e:d6:29:84:e1:08:d0:5e:0d:46:
0d:3e:6b:91:81:34:a7:3f:25:13:b2:5c:b5:e4:1d:9c:97:b6:
8c:0c:91:02:54:35:13:b8:f1:d7:17:67:85:b1:c3:63:3c:7f:
8e:0b:e8:4e:44:bc:30:1f:7d:d0:11:cf:b3:f1:85:00:b1:4f:
b9:a8:3a:51:5b:a7:61:ad:b9:6b:ae:ba:73:b7:41:d4:6d:7b:
ab:fd:a8:13:5c:b9:2d:f0:b6:5e:83:4b:eb:93:f2:aa:af:d8:
11:b4:33:fd:cd:43:cc:13:cd:b1:37:b5:a1:94:3c:a4:b2:ef:
ee:b7:5d:d0:bd:22:45:c7:ab:29:5c:5b:74:68:e5:43:75:54:
88:fd:87:a9:7c:b7:3b:2f:2f:9d:31:5e:b0:ed:b1:4b:33:8a:
29:2f:3f:fd:fd:3e:fa:90:63:ac:76:39:34:a8:c0:e8:a9:ec:
d7:38:3d:65:37:2a:7f:cf:ff:e0:84:3d:b3:ad:46:0d:9a:d0:
1e:ab:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:04:01 2025 by rpki-client