Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbee662d-d630-3bb5-b4a8-084e108a72e9.roa
File: cbee662d-d630-3bb5-b4a8-084e108a72e9.roa (raw, json)
Hash identifier: /04c72R0qQFCoO6J/ZJcEAxk8+Vcy+t12PzJgvOsp1s=
Subject key identifier: D4:C3:CB:7A:DE:7B:E1:4D:BF:5F:32:62:60:61:EF:6F:ED:DE:96:A5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A26132387ED9DD19CC9E400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbee662d-d630-3bb5-b4a8-084e108a72e9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.88.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:13:23:87:ed:9d:d1:9c:c9:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0844647b-3d19-4427-b435-03148484945b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a5:cd:6c:ea:4b:a3:12:10:b7:68:49:58:10:
76:29:8a:b6:9f:df:47:79:f1:79:6d:81:13:6a:30:
13:50:7c:03:74:b3:13:4d:01:a2:5b:e7:99:48:ae:
aa:9d:96:72:26:92:3a:8a:bd:fc:67:16:a5:c3:cb:
35:db:d1:20:bd:ef:88:1d:4c:a0:6f:03:e2:7a:87:
a7:ee:ec:9b:82:9f:4d:39:f8:ae:d7:72:7d:71:ad:
3c:a3:cc:ea:ec:c5:f3:a4:96:59:d4:af:8b:65:b0:
f7:76:c4:35:a3:32:27:c7:72:d0:ce:e0:1d:dd:b5:
8e:b8:ee:01:07:4a:bd:0d:de:bb:ff:62:9b:ca:16:
ac:7b:90:0f:07:13:f8:49:53:9d:c1:75:85:e8:c8:
56:99:72:1d:39:40:ac:72:01:5d:91:f8:93:9d:e4:
5a:7e:43:2b:4e:82:b8:15:07:bc:66:ad:92:0b:73:
fe:b7:08:31:fb:47:b6:74:0f:c1:06:49:1c:bc:2b:
bc:48:13:6e:9b:95:4a:4b:b5:a3:49:dd:b4:a8:a8:
f7:97:99:4e:96:fe:1c:37:2e:9d:91:b7:c6:8d:83:
4a:50:6f:58:f1:ef:52:29:22:88:03:37:ba:75:31:
c4:53:97:ed:33:ef:36:b1:a7:6e:c0:2b:bb:8a:cb:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:CB:7A:DE:7B:E1:4D:BF:5F:32:62:60:61:EF:6F:ED:DE:96:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbee662d-d630-3bb5-b4a8-084e108a72e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.88.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:7d:dd:44:59:15:fc:65:36:c2:cb:e6:b2:89:c9:3c:8c:60:
8c:1c:bf:48:94:35:04:42:d3:bc:82:cc:12:ca:f8:88:c0:c3:
24:26:ba:cf:a7:a5:02:99:f0:5c:ca:8f:a6:f4:d7:11:69:14:
31:36:72:f9:a2:34:cc:f1:a1:49:f2:b3:66:77:46:ce:5e:cb:
6d:c1:fe:6e:be:89:b6:b9:35:ce:d8:15:7f:51:55:14:dd:9a:
2d:36:37:37:dc:4e:0c:fd:f8:33:92:34:f4:cc:6e:00:7a:04:
72:1e:ec:34:ec:52:6b:04:c0:62:be:1f:53:47:2c:92:e9:3d:
34:01:6f:b7:3c:a5:d5:d0:a2:f4:87:5c:82:59:15:5b:06:ed:
20:d0:93:c8:f2:36:13:94:68:fe:60:5d:7c:98:64:3d:d4:40:
26:d4:84:8f:4a:d8:d8:00:70:35:6c:6b:c8:9d:b5:c5:2b:fc:
a2:b8:3d:32:a5:35:ec:ba:b1:28:e8:ce:52:85:cb:f9:6b:8b:
ad:45:35:83:7a:42:fc:23:2e:94:4b:7e:cd:ed:06:2d:2a:37:
0a:c2:65:d4:d0:f7:fc:93:60:1c:9e:ae:eb:e1:9b:1e:58:62:
20:32:44:83:80:3b:8a:35:ad:47:84:dc:ae:89:45:ba:a4:71:
bf:69:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:56:20 2025 by rpki-client