Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6f9a862-1de6-30a0-9666-1cc93052204a.roa
File: d6f9a862-1de6-30a0-9666-1cc93052204a.roa (raw, json)
Hash identifier: k18U/Le80rZfghvT06Gs2rAoxcmijZfpe1iPSaButmw=
Subject key identifier: 63:3B:16:F2:CD:37:EC:A8:12:0F:28:9D:DC:ED:7A:C8:DB:8F:AC:6F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B0666F84C1D5546CEB04D800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6f9a862-1de6-30a0-9666-1cc93052204a.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.129.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:66:6f:84:c1:d5:54:6c:eb:04:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=6015ac5b-5f34-4d81-abe3-9ba56b4d6ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:20:34:47:63:49:1d:14:49:e1:43:51:ba:
7d:e9:35:ed:a6:de:38:fc:aa:d5:79:bd:ff:41:f0:
d4:b9:9e:13:4d:f0:86:9d:3b:75:3b:41:3d:56:2e:
d5:3a:0e:9d:8a:b2:d0:ff:3e:4e:36:60:33:22:e8:
7b:40:95:f4:23:c1:d7:be:b4:40:af:2e:d8:ca:82:
4b:cd:54:72:30:2f:de:f2:14:9e:1f:14:8f:26:d4:
5a:b4:2f:f7:63:48:82:3a:83:fd:d2:68:22:d0:4f:
4d:39:1c:8f:ec:32:cf:9c:00:53:35:4c:5c:49:5f:
9c:85:95:71:d1:3c:b1:1d:71:c6:63:61:09:fc:94:
7e:6e:d3:0c:df:cf:8c:ff:93:d0:17:cf:26:e4:90:
27:9f:c4:77:ea:ef:eb:ef:df:74:61:2c:fe:4d:e4:
94:e1:83:ab:df:74:f9:ae:9a:71:94:91:4c:c9:48:
e1:4a:84:60:0c:fd:8a:db:ce:0c:c9:58:ce:be:c8:
60:15:b9:50:53:10:5b:79:1d:b4:0b:8c:e3:9f:ce:
7c:0e:86:06:5b:85:35:e0:09:77:bc:c3:2f:af:9d:
eb:56:fc:ad:2a:dc:22:6b:0d:72:d9:b3:44:45:04:
b5:f4:8a:da:27:de:2b:c0:8c:d6:9e:74:7a:0b:c9:
b3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:16:F2:CD:37:EC:A8:12:0F:28:9D:DC:ED:7A:C8:DB:8F:AC:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6f9a862-1de6-30a0-9666-1cc93052204a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e3:1c:96:6c:dc:77:3a:c9:bb:95:73:6d:45:87:29:1b:f3:
1d:30:d1:16:c1:a0:83:bd:d7:75:1d:1a:e6:4a:54:97:db:33:
81:f0:7a:2b:10:55:98:0b:04:99:50:3c:63:4a:bb:21:7c:ab:
82:3e:f7:93:72:8b:eb:ef:25:67:d3:b9:0b:59:59:11:f5:c4:
be:76:ab:50:b0:af:6d:45:c6:11:aa:86:c6:32:41:5b:01:d6:
6d:f1:7c:b1:47:cc:e6:9a:d6:cb:e5:f7:6f:8c:2d:ac:e0:78:
a0:d1:00:5c:44:7d:de:bb:12:e5:29:a6:27:aa:0a:e2:8f:78:
cc:b5:aa:72:30:db:52:12:70:97:25:c0:78:c0:b6:b8:b8:2f:
02:b3:70:dc:3b:dd:57:af:e0:39:8a:e5:10:7a:15:8c:96:82:
aa:be:77:f5:fe:47:be:7c:04:ef:d9:e0:f3:1d:61:e7:b0:35:
a4:05:bb:39:34:de:1b:e9:d8:6d:48:95:cd:48:29:71:f9:6c:
f3:ca:ad:ea:33:fb:06:97:82:55:c9:b2:8c:ab:3d:65:71:3d:
8b:55:01:87:2b:a4:2a:02:9e:0d:39:54:da:be:b2:4c:b9:ac:
bc:74:98:fa:55:d5:9f:d8:ab:7e:27:64:79:8d:17:9f:2d:51:
85:f8:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:55:10 2025 by rpki-client