Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c04bd09c-9313-3a93-9a7c-baa64f6800e1.roa
File: c04bd09c-9313-3a93-9a7c-baa64f6800e1.roa (raw, json)
Hash identifier: mey+w0K2sLrAu7QgV80mYz7MqK8Ui+t8AHUovEhkpxQ=
Subject key identifier: 1F:C1:73:7E:76:59:5F:A4:48:35:06:C4:03:9C:43:8A:BD:04:45:D0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1053139D62065055AB5900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c04bd09c-9313-3a93-9a7c-baa64f6800e1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.96.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:10:53:13:9d:62:06:50:55:ab:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3d608eb1-7ca0-48cd-9e71-45e685b3c47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:4f:4d:6d:8f:06:b6:e2:6d:72:d9:51:a3:
dc:c3:b2:aa:79:78:fc:fe:13:20:c5:f3:0d:1d:6e:
a4:4c:d9:5f:96:33:2f:ed:7b:f3:75:df:75:f6:e6:
31:63:59:fd:31:1e:b8:cc:44:e2:e1:c5:f5:6b:36:
db:c5:29:bc:a4:1a:24:40:d7:c9:83:79:52:a1:0e:
ff:81:53:0f:2e:7c:af:b7:20:42:3f:b7:73:f9:7f:
bd:1e:81:59:57:a9:de:1c:38:03:96:bf:71:c0:77:
6b:73:2d:1e:28:fd:a5:bb:95:a9:50:c6:d5:80:55:
d5:fb:41:ec:16:5e:2d:34:b1:bf:ed:7a:16:46:0a:
33:4f:1e:f9:13:cb:1d:07:78:31:95:58:5d:f3:48:
d5:61:61:5f:e6:30:a8:d6:60:13:16:0e:da:0d:d0:
0a:8d:a0:68:84:6f:36:80:c8:69:6a:8a:ca:5a:ac:
d7:70:78:fc:5b:04:04:1a:0e:a6:f2:cc:47:4e:9f:
0b:d7:3d:92:f2:0b:e4:30:b1:fe:8f:76:e7:63:20:
f9:c2:83:81:9b:52:d9:fd:ed:3c:81:d4:25:ca:fc:
47:c0:af:5f:fb:f7:83:86:09:84:d4:32:65:55:69:
06:40:b8:84:6c:8f:8b:62:ec:ed:11:92:91:74:3d:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C1:73:7E:76:59:5F:A4:48:35:06:C4:03:9C:43:8A:BD:04:45:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c04bd09c-9313-3a93-9a7c-baa64f6800e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ca:08:1e:06:cd:08:8e:b0:db:8e:79:d0:7c:12:c1:5e:7f:
3f:2c:71:72:f5:9f:13:fc:09:01:3d:80:8b:22:00:c7:c8:72:
ee:5a:f6:f3:db:27:a2:8c:d1:86:bb:28:d9:29:77:2c:a5:e1:
93:69:e2:b7:cd:18:81:00:e1:b3:68:42:b7:a7:cb:5b:5e:83:
4e:72:dc:51:fd:e0:6a:d0:6a:6b:d2:5f:c2:b4:f7:8a:a4:6d:
93:f9:ed:a1:3b:9a:92:e5:97:79:16:ee:63:a4:27:2a:fd:51:
d9:95:7d:18:d2:2a:0d:27:6f:4d:5b:d2:01:be:d6:6d:63:78:
be:57:42:2d:a0:dc:72:9e:37:96:21:4b:99:ae:fc:d0:6a:55:
3f:cf:e1:0e:56:bd:6d:eb:75:e9:a4:b7:a5:95:a6:75:08:27:
1d:aa:ff:05:55:98:5e:07:05:5f:91:c9:47:64:8a:d7:be:cf:
3d:04:6c:a9:13:0a:67:9e:cd:2b:3a:93:ad:58:a6:70:0a:ac:
ea:ed:a3:cb:02:52:f5:ad:7f:7e:3c:fe:9f:c6:06:3a:b4:1d:
1c:a9:7e:fc:77:54:bd:a1:53:7e:6c:3f:d9:f2:be:4d:e4:31:
92:1f:51:89:96:41:98:e9:d1:55:6e:8c:f9:c7:76:02:11:e8:
d7:59:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:36:10 2025 by rpki-client