Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0409700-c819-3439-9909-c61638cf8b23.roa
File: d0409700-c819-3439-9909-c61638cf8b23.roa (raw, json)
Hash identifier: YmVyMTwdVR2/QDgMcRXnnjY9MUrH43ttKCFcifKDESo=
Subject key identifier: 40:41:DF:E8:1B:D1:E3:6A:6C:EF:59:A8:94:72:09:5B:D2:DC:8D:9A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F7E316926333672D916580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0409700-c819-3439-9909-c61638cf8b23.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.96.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f7:e3:16:92:63:33:67:2d:91:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2966afda-c217-4a7a-bc7c-cd7195675b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:a9:be:1d:9c:4f:72:6d:c8:96:e0:48:9f:
9c:6d:45:63:84:1e:2a:5e:b3:d7:00:4b:da:d3:d6:
8c:42:16:b3:bc:fb:8e:eb:b1:6a:12:7c:ff:e5:4c:
8f:16:98:8e:e1:4c:e7:8f:26:6f:c7:56:ea:cf:1d:
f7:84:42:c7:67:b2:a5:68:57:ba:59:e8:bc:06:54:
29:ce:22:29:95:83:b5:15:f5:ac:e3:60:5a:96:47:
2d:26:e4:21:dc:b4:c0:98:31:e9:62:c3:83:34:bd:
69:28:bd:a3:8f:7d:21:62:26:56:2f:ac:c6:24:0e:
94:3e:0d:11:a5:61:c8:95:a2:ca:66:db:12:30:29:
9b:90:e1:ad:1b:6a:b2:8b:44:ec:43:cb:fb:54:87:
5f:84:64:01:ce:a5:f7:b3:b3:d0:af:63:2d:4c:e0:
4e:04:6d:d0:7e:e4:e3:a6:1d:f3:8a:91:14:54:2a:
e0:6c:a6:df:b3:e5:d5:bc:4a:79:67:f6:74:46:2f:
ae:5e:82:33:a4:0e:1a:30:7a:b2:4c:09:b2:7c:36:
f3:b8:fa:51:d6:db:31:89:60:5a:09:16:12:34:0f:
dd:9c:35:1d:2b:cc:1f:a8:3b:1b:22:02:37:59:aa:
a8:26:3f:80:6c:55:0d:93:53:db:7c:65:e9:d4:0c:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:DF:E8:1B:D1:E3:6A:6C:EF:59:A8:94:72:09:5B:D2:DC:8D:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0409700-c819-3439-9909-c61638cf8b23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:1c:ee:ab:77:9a:15:37:4a:25:a1:70:9c:72:c3:ad:30:e6:
67:54:57:be:68:9d:e9:fb:ee:17:fd:8c:bf:a6:00:7d:24:37:
6d:f4:60:7b:c0:75:3b:4e:41:6c:c0:a2:fe:c2:e7:02:a1:6d:
40:41:6e:8e:36:ee:9d:42:0a:78:a0:30:13:ea:0d:99:ce:58:
32:36:42:1a:61:ff:3e:de:2e:04:bf:b7:cd:05:a6:80:9f:2f:
de:da:81:67:65:a4:72:cf:99:46:9a:2f:68:1f:38:cc:aa:a9:
40:90:10:60:53:5b:52:76:4f:de:0a:ba:e2:18:9c:7f:2b:ec:
e3:a8:1f:a9:14:3a:f3:b2:2c:df:1e:a3:80:d4:89:5c:01:09:
4e:d3:b9:ef:a7:f3:cf:18:04:98:e8:ae:f0:ca:ad:b0:4b:df:
64:ab:5a:4d:0a:84:9f:86:e2:b3:dd:45:94:8a:60:a7:0d:74:
b9:bf:16:1d:7c:30:e5:0c:c6:97:38:bc:66:42:d2:9b:9c:09:
d1:d6:f3:e8:ad:bc:cb:7b:0b:32:b6:de:38:ce:fe:27:75:29:
e2:16:91:0f:f2:56:b9:40:57:64:ff:b8:d3:ae:22:ad:04:80:
a5:98:03:3c:00:d2:02:5f:68:7c:0c:33:39:84:0a:29:ea:75:
22:63:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:27:44 2025 by rpki-client