Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e423ad73-653b-3c8f-a3c8-7a6a4032e68e.roa
File: e423ad73-653b-3c8f-a3c8-7a6a4032e68e.roa (raw, json)
Hash identifier: 9ToM3G8L7IckwxDR2sXp1XDdj0VuNtKU+fq8btmbnqk=
Subject key identifier: E5:40:F3:B5:17:6B:36:DB:D2:10:9E:CC:AB:2A:87:69:B1:0F:FE:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583BB7CD9FD458B9230452BF6580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e423ad73-653b-3c8f-a3c8-7a6a4032e68e.roa
Signing time: Tue 26 Oct 2021 04:00:00 +0000
ROA not before: Tue 26 Oct 2021 04:00:00 +0000
ROA not after: Sun 28 Jan 2024 05:00:00 +0000
asID: 396982
IP address blocks: 34.168.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:b7:cd:9f:d4:58:b9:23:04:52:bf:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 26 04:00:00 2021 GMT
Not After : Jan 28 05:00:00 2024 GMT
Subject: CN=90018ba7-2dd8-4a61-b541-ad98ff22c4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:08:59:ce:07:4f:51:48:64:27:94:54:66:
61:60:0e:e8:ee:c9:f1:0e:14:f7:cc:d4:35:11:b0:
e6:32:3c:88:e3:6e:c7:ed:ac:65:da:f6:87:43:bb:
dc:05:28:ea:28:29:ff:61:b8:31:0c:71:08:72:1c:
57:a4:a5:80:63:f8:a8:34:7b:c9:41:65:00:d0:52:
d5:24:41:03:26:5e:72:fb:a2:99:18:39:00:19:25:
3c:67:ab:b8:23:aa:69:7c:4f:7c:ec:c4:b8:f3:15:
14:70:ba:7c:61:97:ea:6f:1d:14:bb:47:08:57:bf:
25:60:f1:ac:95:19:d6:2e:2a:4c:bb:bb:68:53:f0:
ea:05:25:40:b3:d6:cf:78:6e:d1:03:ba:57:08:44:
1e:72:11:d3:d4:32:43:a3:d0:f6:ff:0d:b5:bd:ff:
34:f5:35:3d:99:b7:89:99:c8:c9:6d:f8:a8:39:db:
3b:2a:9f:12:1e:23:c7:a8:07:0a:56:c9:fb:8b:d0:
69:5a:1f:c7:83:e6:55:51:a4:35:d9:f9:d9:a1:a2:
dc:ec:93:86:c7:65:3d:ca:0e:ab:17:95:3c:c6:82:
44:93:0a:c2:71:60:d1:65:a5:88:b5:e2:d3:a1:c9:
3a:92:25:d2:12:24:8d:eb:5b:f4:05:57:31:1f:10:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:F3:B5:17:6B:36:DB:D2:10:9E:CC:AB:2A:87:69:B1:0F:FE:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e423ad73-653b-3c8f-a3c8-7a6a4032e68e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.168.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:02:b6:23:e9:07:8e:ff:de:1e:f2:ac:12:b2:fa:da:95:da:
b6:a5:4d:d6:e7:99:cb:d8:47:67:95:50:b3:54:d6:20:bf:5a:
cb:1b:6c:19:ee:98:cb:5a:d9:6d:82:ad:71:e8:4c:3d:a4:30:
de:33:61:76:2f:74:71:f8:58:67:e3:01:5b:9d:2c:78:58:1a:
c5:83:3b:67:f0:d7:23:90:40:ce:a7:7c:ed:fd:fa:aa:2c:f0:
65:49:16:c9:04:7f:e7:c0:60:22:d4:d4:cc:ae:fb:b3:c2:08:
33:a1:fc:af:a8:1b:78:48:21:89:01:ba:14:7a:1c:84:c0:24:
ed:d4:34:0d:ff:62:81:69:84:aa:99:4c:fd:79:90:8a:9d:c9:
5f:2e:26:20:44:21:6d:05:fd:c5:b2:e9:42:99:e3:c2:1e:a6:
e9:cd:4e:19:a8:3a:19:95:c5:88:bd:d6:b6:ad:54:ff:dc:e0:
d8:5b:12:b5:c3:1a:4d:3b:46:87:2a:f7:c8:cc:ed:c0:d2:4d:
0a:8d:6f:3a:ce:c7:8a:05:12:ad:55:f5:5a:f1:75:5b:36:28:
66:8e:77:b2:ea:47:fd:0a:fd:47:04:b6:25:eb:e9:67:91:43:
86:8e:d4:f7:be:d7:6f:54:18:a7:c2:4e:c1:de:f0:c7:90:a5:
2e:d0:a0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:09 2025 by rpki-client