Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d6ae29-e1d3-3e6b-b383-ba156fc35f40.roa
File: d2d6ae29-e1d3-3e6b-b383-ba156fc35f40.roa (raw, json)
Hash identifier: X/o3djOO0P28sha+ZnZb30EMRp+33OiIAE6idEKlKoQ=
Subject key identifier: FC:F5:07:58:FA:0D:E9:98:AA:C8:8B:19:48:FF:96:01:D0:34:96:93
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1959EC128231FC34CA73C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d6ae29-e1d3-3e6b-b383-ba156fc35f40.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.87.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:19:59:ec:12:82:31:fc:34:ca:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=78852218-7ef7-44df-b7e7-49383f6f607f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:20:1d:36:e2:2c:e8:8e:21:a0:8b:ad:13:
f3:de:98:7b:f5:84:60:6e:af:e3:ac:05:02:db:bc:
30:53:a3:26:78:e6:8b:d5:10:33:7d:40:c8:d0:d2:
b7:fa:ef:0b:9e:d8:cd:6a:1f:1f:e3:4d:c6:e8:f9:
3c:6b:a7:d3:30:2b:65:a7:64:45:27:c9:12:d3:da:
2d:fe:06:31:3d:b5:a5:55:85:0e:90:28:64:2c:bc:
ea:5a:7e:f7:15:2d:77:dd:0f:36:ab:8b:f3:5f:f5:
36:f3:f0:7d:09:52:03:a3:d7:9d:52:b7:a0:0f:83:
9f:df:36:f2:f6:4a:99:cf:ba:cc:1d:9e:eb:01:9c:
01:43:44:8c:91:ee:16:50:37:53:84:b1:1f:50:ed:
27:dd:76:4a:15:52:79:66:cb:d3:6f:d7:5a:98:8f:
b8:f5:e5:fa:3c:bf:ca:ec:39:f3:d1:cc:62:be:91:
96:6c:df:53:fc:6f:89:b7:a4:91:09:14:0b:a4:ee:
be:50:84:b9:ee:22:13:06:09:ea:a3:94:1c:b0:3e:
ae:c8:ba:f8:aa:e2:e1:16:56:0c:65:1d:3d:3d:52:
20:27:38:ff:39:24:6b:d1:97:8a:2d:b6:2d:22:82:
31:08:9e:33:cb:43:45:ae:68:c4:61:b0:93:05:3f:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:07:58:FA:0D:E9:98:AA:C8:8B:19:48:FF:96:01:D0:34:96:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d6ae29-e1d3-3e6b-b383-ba156fc35f40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.87.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:84:e9:76:c6:62:60:92:57:cd:63:69:8a:79:19:d8:19:c8:
81:a4:9c:42:7c:64:50:3e:c4:48:65:1f:12:7e:6f:8a:9e:6b:
4e:de:61:ca:db:43:58:78:de:1e:4b:f2:76:0a:9b:5a:73:3c:
cb:5c:17:09:73:6e:7a:0d:31:b7:14:2e:a8:8d:d7:65:79:37:
dd:9a:17:fb:f2:10:33:36:c9:ae:7e:d6:2d:23:c2:ce:83:dd:
00:78:e4:08:32:c4:ca:3b:a7:b3:a2:c3:09:a0:d2:5a:36:28:
1f:84:c3:07:25:05:17:32:63:a9:93:35:43:ee:8d:c4:7a:22:
0f:7a:32:32:6b:47:9e:43:f3:71:08:ac:fe:77:f5:70:a4:8f:
92:3e:0a:58:1c:bd:37:f2:b1:da:43:97:0b:a7:49:7a:8c:c5:
97:7d:f9:82:dd:e2:fe:3d:25:db:7c:16:49:2c:ae:fd:c8:64:
3e:7e:12:99:d3:09:f2:7c:07:34:e1:2c:56:1e:cd:b7:c6:ab:
8d:aa:56:84:50:03:bf:78:e3:34:d0:76:3e:b6:56:be:5a:23:
9b:41:17:59:a3:25:4a:bf:88:31:b3:43:db:57:f3:01:77:ef:
71:8d:9a:57:0b:c4:dc:bd:48:d2:1d:c6:0f:72:b5:ee:92:73:
3b:71:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:19:43 2025 by rpki-client