Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da21ba32-14d5-35c0-a828-f1c6a0fe2a08.roa
File: da21ba32-14d5-35c0-a828-f1c6a0fe2a08.roa (raw, json)
Hash identifier: /w0St4Pr0iU3a7HVK2i3Ssdf+5gb22EhY6J9rgepoyg=
Subject key identifier: B9:51:89:0F:E4:72:F4:08:79:23:25:D2:BB:FF:7B:5C:41:E5:5C:5D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE85BACAF127CFCE47092180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da21ba32-14d5-35c0-a828-f1c6a0fe2a08.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Sun 29 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.156.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:85:ba:ca:f1:27:cf:ce:47:09:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Sep 29 04:00:00 2024 GMT
Subject: CN=e275214b-9a36-47aa-b587-63682e50c465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:0a:39:cb:ca:95:f6:c4:6a:23:74:40:2e:
b6:b8:78:88:7b:4e:91:e5:4e:39:09:9d:77:50:e4:
71:ce:90:48:ab:48:9d:77:49:8d:2c:49:a8:7e:53:
1f:fc:8a:66:f4:ab:f7:2f:4f:3e:f8:c0:1f:44:fc:
f3:cc:83:9b:22:b3:4d:29:2e:74:e4:28:bc:3d:3d:
03:fa:d8:6c:86:91:da:ec:8e:24:78:10:b2:2f:2e:
a6:de:e2:69:0d:3c:dd:80:f7:36:d7:19:4a:b5:cd:
c3:49:40:c7:94:49:b7:2c:c4:91:de:39:29:c2:14:
24:ac:28:de:25:ad:f6:52:bd:5c:c7:65:59:90:5c:
c4:5c:3a:b1:27:84:cf:2d:d3:f8:59:4e:3a:18:7f:
be:4c:29:aa:7e:ae:06:02:d3:05:b1:8e:7f:6b:06:
63:df:6a:2e:81:68:bd:0d:53:47:f0:ed:77:fc:c1:
dc:65:f5:5d:45:2f:99:e3:c5:3b:6f:4c:5e:b2:c8:
20:e7:69:47:4a:7b:be:69:a4:4b:57:85:43:08:27:
c2:c5:4e:43:3c:27:7d:5a:a8:40:96:c0:b3:46:2d:
e6:da:40:da:87:c3:c9:01:d5:9e:81:f1:f6:af:86:
e1:e1:ca:0c:72:96:2f:87:80:03:70:69:13:40:8c:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:89:0F:E4:72:F4:08:79:23:25:D2:BB:FF:7B:5C:41:E5:5C:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da21ba32-14d5-35c0-a828-f1c6a0fe2a08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:38:b5:a0:d7:83:6c:f8:8d:66:ef:a2:e5:36:59:5c:98:c4:
c7:47:55:60:f8:01:f4:07:b5:03:0d:0c:6a:50:82:55:24:ca:
e1:60:96:cd:d7:99:3c:d1:9f:6c:94:ff:d2:0f:58:69:44:3d:
05:21:7a:5d:01:0d:6f:c2:d5:5b:44:29:d9:4d:d1:6c:4c:0b:
6d:7c:67:e7:5e:79:69:08:cd:f3:e8:fc:78:23:87:8f:43:00:
0c:d2:2b:fb:a1:78:e9:df:cc:91:bb:7b:63:b2:2c:7f:f6:a5:
7a:4e:b9:7c:db:d7:99:29:f2:a3:dc:b8:3e:f6:a6:f1:d7:9e:
fd:b7:07:68:d9:2b:7d:65:d6:4a:f9:ad:cd:d1:f4:8b:8d:e2:
58:7a:a5:74:50:18:53:7e:79:84:57:75:e0:1d:9f:22:0b:75:
b7:a6:94:fc:07:7a:79:d9:7a:dd:fc:6e:aa:08:0f:8f:f3:98:
c7:71:38:5e:bb:83:21:85:a6:09:3d:dc:f1:16:5c:25:39:e2:
8d:a8:13:94:6e:a0:57:1f:09:1d:5a:00:6f:e5:07:ce:b7:23:
f5:41:3b:82:b0:ae:59:3c:98:7b:0a:2e:4d:78:4f:8d:ff:ad:
08:7f:b6:a5:fa:b1:f3:19:ee:5e:67:35:cc:1c:1c:1c:de:ca:
4e:58:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:39 2025 by rpki-client