Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c34d8f83-eff6-3d1f-b519-405f39210463.roa
File: c34d8f83-eff6-3d1f-b519-405f39210463.roa (raw, json)
Hash identifier: Hg5DwF3O8ot+CdtMqBEkRYcNDR74nHIK398YxUmGkkU=
Subject key identifier: 52:30:99:58:A9:35:6D:AA:E1:A4:9F:E9:B3:ED:49:CD:97:40:78:B2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0AC551A87BBF7618024690
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c34d8f83-eff6-3d1f-b519-405f39210463.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.68.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:c5:51:a8:7b:bf:76:18:02:46:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=40363bf1-417b-4834-a69d-83980a81cb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:bb:f6:f1:a0:fe:f5:45:c7:c0:85:ce:5c:
eb:03:70:c3:d9:0b:e5:b1:de:3f:b3:c4:d8:5a:ad:
ad:82:b3:a0:b2:b4:aa:04:48:4a:a7:ea:5f:7f:a7:
c3:6c:c7:41:ca:37:63:7e:b0:1c:db:00:e5:f6:f4:
a5:3c:7f:54:02:cf:1f:56:6b:9f:83:fa:a2:cb:0a:
89:11:49:a2:70:78:5c:7d:95:ab:c8:b6:b5:42:80:
00:07:2c:95:50:8c:d1:45:33:56:22:84:89:6b:b4:
e5:ca:76:46:17:5c:cd:d2:29:63:a8:68:34:10:61:
55:34:f9:50:a6:d4:e8:a7:68:7c:8a:96:17:b7:9e:
41:29:51:a6:5b:5d:a6:6f:b4:5b:0b:25:30:ed:a2:
28:55:d1:ce:53:17:32:a5:43:28:0e:7a:fd:10:e0:
74:ec:fe:b1:5f:72:a1:85:64:86:10:24:f9:cb:6f:
35:3a:fb:bf:17:74:30:38:00:fc:94:77:ba:dc:36:
95:4a:6d:84:61:bf:d4:0e:cc:cd:fd:62:05:a8:92:
81:fc:ec:c9:ad:de:c0:bb:80:08:e6:7a:92:4a:85:
52:6e:ea:1e:7f:4c:c3:07:c2:3f:d9:f8:c5:21:45:
60:53:b8:42:2f:54:e7:32:c4:de:d2:39:59:5d:a5:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:99:58:A9:35:6D:AA:E1:A4:9F:E9:B3:ED:49:CD:97:40:78:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c34d8f83-eff6-3d1f-b519-405f39210463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:99:17:d2:c0:53:fe:3b:11:99:11:5a:3b:55:4b:0f:87:41:
05:c9:ce:19:80:13:f6:f4:91:6d:57:a8:c8:eb:1f:9b:f9:85:
32:ab:71:72:29:69:c7:94:ab:0f:c6:0a:f9:b5:2c:c7:dc:4c:
64:d3:28:39:e5:80:bf:db:23:ab:68:a7:7a:1d:f5:a5:69:be:
8a:8a:56:53:3b:2f:cc:4a:10:3f:b6:78:97:6e:51:72:2a:fe:
c2:50:70:72:47:c6:79:f4:62:c2:03:71:a4:ad:35:a7:67:38:
50:30:34:ad:c4:f6:04:fe:26:20:a5:cf:8f:ac:7b:bb:e3:f4:
8a:24:f1:b1:19:ab:1d:69:c7:5f:52:00:32:83:d8:b3:a9:1b:
fe:a2:85:c7:59:05:71:e1:d2:54:de:54:a8:ac:be:6e:4d:e1:
f3:d2:b6:4e:18:b4:74:71:a8:1a:f4:c9:e5:23:f1:95:65:41:
e7:aa:55:a5:c5:26:78:8c:b6:1c:fa:9c:3e:ad:b2:e7:34:77:
58:d1:88:2d:47:f2:3d:8b:c0:5d:16:2b:c7:29:8e:70:cb:84:
da:69:91:36:ac:4e:36:29:2b:cb:11:ef:0a:f8:d4:d6:e2:90:
5f:19:5a:19:86:c8:8d:66:0e:18:81:67:53:4a:46:e5:ff:5d:
22:2d:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:43:30 2025 by rpki-client