Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd27a9c3-93b0-3a74-a7ed-301eff621aa0.roa
File: cd27a9c3-93b0-3a74-a7ed-301eff621aa0.roa (raw, json)
Hash identifier: 2MfWmMzJcXv2rtR+c2Ok2NOeLcD21+cnBv0HfPAW4nE=
Subject key identifier: BC:20:20:98:EA:65:92:48:A6:0A:E2:2B:FD:A8:15:B9:4C:58:E1:E5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7ABC8F9D7965E45070E86F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd27a9c3-93b0-3a74-a7ed-301eff621aa0.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.144.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ab:c8:f9:d7:96:5e:45:07:0e:86:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=05079ec8-d5b7-4376-baf6-fc4c49ddf8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:e1:f3:b5:86:35:eb:56:02:c1:69:d4:d7:
4c:27:00:b2:df:61:6d:c0:0a:9f:51:1a:47:69:a3:
5e:7a:25:33:3b:35:6c:0d:31:e0:39:c6:4f:16:16:
03:74:83:19:12:84:f2:6b:15:0a:c3:b8:cb:5a:1b:
1d:b3:8e:3f:fa:7a:a7:bb:0b:45:81:71:c3:f1:90:
d9:34:0a:69:5d:ec:c3:c4:15:30:8c:e5:5b:b5:3d:
8f:24:c6:69:a6:10:a6:12:4e:98:aa:8d:88:46:de:
ab:17:a0:3b:75:4c:3d:f6:14:93:25:7d:7c:4e:33:
1d:76:bc:32:92:43:b2:59:85:ca:02:91:58:52:9a:
bc:f8:4a:18:bf:a5:69:25:66:17:bb:ec:cb:00:ea:
de:86:69:88:56:e6:f3:25:13:a3:d6:06:f7:96:08:
93:d6:97:fc:6a:87:16:dc:3f:20:1b:ce:38:a8:d8:
b9:95:52:c2:d0:2d:52:e4:8b:41:20:ed:29:51:44:
bb:c0:95:7e:96:5a:7a:3c:25:0a:fd:d8:45:af:27:
91:11:1d:99:88:39:fe:b2:f6:54:23:82:20:71:d2:
66:b0:bb:6c:2f:ad:d8:14:d4:32:a4:9f:ba:e4:2f:
a5:33:22:ef:be:9d:7e:7c:aa:76:4e:c1:94:c0:75:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:20:20:98:EA:65:92:48:A6:0A:E2:2B:FD:A8:15:B9:4C:58:E1:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd27a9c3-93b0-3a74-a7ed-301eff621aa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.144.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:83:db:3c:8c:a9:e4:c3:ed:4c:f1:f4:2c:30:e1:16:93:24:
d7:f9:0a:53:65:c9:de:63:81:e1:64:24:c9:6b:b6:c8:c7:c8:
65:22:e7:6c:e2:cb:27:31:58:c5:00:a9:1d:6f:54:63:3c:bb:
37:88:08:45:79:f0:91:7b:75:1f:7f:8b:32:4f:ac:9f:98:93:
1e:b3:6c:84:8e:f3:0f:b9:07:ff:8f:b5:5c:09:5f:35:36:a7:
6a:81:fd:52:e4:96:a3:2c:75:49:7b:aa:b3:4a:31:46:6b:de:
6b:fa:76:01:ce:97:93:9a:75:3e:f2:13:be:3f:2a:9e:91:bb:
60:cb:ae:92:75:ea:70:40:ae:72:15:2a:47:dc:d9:7b:3d:09:
51:a8:c7:54:8f:fb:c8:74:33:66:1e:34:2c:fa:74:7c:46:06:
1e:ad:39:55:a7:bf:06:1d:13:e2:de:b7:f0:63:57:a6:69:f0:
03:35:70:78:cb:5f:b0:18:34:6a:4b:96:fe:9e:70:91:2f:a9:
2d:bd:e6:82:aa:41:b8:ae:40:c7:3d:b0:68:ac:2c:6a:6c:f4:
07:1e:98:7c:07:be:7b:8f:3c:0a:d2:82:f7:36:fe:73:47:a6:
01:20:d5:05:64:2f:5a:94:cb:e0:94:1d:a4:da:0d:4b:b9:87:
da:8b:88:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:45:54 2025 by rpki-client