Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb73fed9-22fb-3480-ad16-a8316765980f.roa
File: cb73fed9-22fb-3480-ad16-a8316765980f.roa (raw, json)
Hash identifier: jFbJJmNFWDM7oB5JWtKOmT6ZEvYW+QD1go1lIgcBjZI=
Subject key identifier: 16:37:63:DA:35:81:D2:CC:F8:66:31:B9:41:B1:47:DA:76:C0:B3:58
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F8D9980496CE6105266FC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb73fed9-22fb-3480-ad16-a8316765980f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.121.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:d9:98:04:96:ce:61:05:26:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1060a97f-a5f5-4b5b-a9ff-b2b31f05b7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:f1:d9:3f:4b:f0:5a:dc:2e:cd:b9:37:33:
47:87:93:7e:c0:94:9d:d1:7e:16:7e:00:91:89:22:
74:84:03:5d:85:83:a0:38:c4:be:69:37:6d:60:09:
57:83:91:da:2e:2e:96:e2:4d:94:b9:ad:4e:74:64:
d8:94:f8:70:57:9e:f6:cc:ed:3d:67:0f:6b:70:ca:
31:23:ba:b1:e2:a7:16:ca:1f:74:4f:4e:06:3f:00:
df:ee:bb:40:c8:84:39:44:3b:bf:3d:70:26:38:a2:
b1:59:dd:82:96:14:0c:96:10:59:51:03:d5:c9:b2:
00:aa:ec:68:e0:5b:e9:a4:f0:08:a1:6f:14:32:27:
b7:19:48:46:56:e6:9e:77:8b:43:af:d4:16:39:2f:
e3:86:85:e9:2f:a9:01:55:57:41:e4:37:a4:b2:9b:
5a:a6:5b:75:8e:1b:36:df:30:25:d0:9a:28:0c:fb:
6b:2f:16:16:b2:6c:8c:47:47:74:c7:c2:80:7a:51:
b4:74:fd:11:05:e2:12:0c:2a:37:71:84:94:f9:2c:
fd:5b:a5:80:40:f3:03:cc:82:03:3d:66:7a:87:a8:
56:00:f4:67:e3:5b:17:81:16:62:14:28:01:53:0b:
db:2c:df:ee:be:37:bd:d0:a7:d6:e3:24:58:25:bf:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:37:63:DA:35:81:D2:CC:F8:66:31:B9:41:B1:47:DA:76:C0:B3:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb73fed9-22fb-3480-ad16-a8316765980f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.121.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:1f:dc:e8:75:2d:17:6f:26:f1:6b:34:75:e2:54:04:50:1d:
df:d8:96:dc:a9:fb:25:62:06:b0:f2:42:74:12:54:a7:05:d4:
c4:d1:7c:a5:53:55:bc:fd:40:96:7d:d1:14:7f:f7:b6:7c:01:
58:e5:a8:46:f0:e4:68:08:24:58:5e:46:fb:55:fd:25:e1:f7:
43:fd:d9:57:2b:74:1a:e4:7d:83:73:85:95:56:7d:ec:78:05:
da:cb:21:86:d7:cb:0e:ae:25:9f:24:86:5d:c3:3a:18:40:57:
b7:5c:2c:f0:72:fd:da:17:db:6b:ac:84:b3:28:68:9a:65:17:
3f:ec:04:24:38:05:54:d8:f1:1e:a0:be:6e:0d:13:fb:b1:e1:
2d:8d:b4:7e:a6:a6:f8:e8:e6:76:37:19:bb:c5:d5:b3:b9:17:
95:b4:e9:d5:e4:98:c5:e7:fc:48:d7:4a:bf:2c:93:e3:05:c5:
ff:60:56:d4:09:58:68:d7:9f:13:af:a3:20:57:9e:7f:3a:d8:
fb:5c:ef:6c:58:22:d5:d4:53:57:32:9b:ac:61:d5:9d:a4:93:
6b:79:53:f6:00:04:42:22:ff:ca:08:45:24:22:68:3b:de:d3:
c8:61:23:55:24:ea:08:68:30:7a:b8:27:02:50:af:eb:ea:3d:
dc:39:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:48 2025 by rpki-client