Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e44a456c-1e3e-3c96-812e-fa902575fd01.roa
File: e44a456c-1e3e-3c96-812e-fa902575fd01.roa (raw, json)
Hash identifier: 1vMRgkYAyexXxZV33mDN2Oe9UjneY+LQz0F89GsUpCQ=
Subject key identifier: 65:93:1F:D2:67:94:48:4B:61:7D:0A:CC:D1:BE:F8:09:27:11:7E:D9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A078FEB679FA4E2518BB500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e44a456c-1e3e-3c96-812e-fa902575fd01.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.68.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:8f:eb:67:9f:a4:e2:51:8b:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fe9cc381-7577-40e0-bd6a-2a9c79192979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:eb:7b:fa:43:01:d3:44:c0:ae:1e:a2:fb:
1d:14:28:b0:54:17:9f:4f:53:92:0f:bc:c2:80:99:
68:5f:56:44:48:37:f0:d9:bd:7c:22:fd:90:51:fc:
4d:ea:84:01:1f:21:b1:2a:18:ae:50:70:5b:cb:dc:
22:16:aa:00:18:48:71:dc:0f:32:94:2e:4f:32:51:
70:dc:65:3d:31:53:9b:ad:af:3d:28:62:46:3e:f6:
9c:b7:c0:c9:c6:ae:ed:67:b8:7c:45:fb:f7:e4:e2:
5c:45:0a:27:b6:1b:6d:62:76:c9:cf:c0:53:65:cc:
2b:0b:7c:94:20:ef:c5:27:94:e7:ba:dc:aa:a2:7d:
08:15:38:9d:1c:dd:b5:fa:8b:2d:bf:45:f2:94:45:
fd:79:32:d1:1b:f3:bf:81:90:f6:49:84:4b:1c:e2:
68:70:f3:3f:8b:d1:a9:e7:6d:0e:f4:a2:ac:36:4f:
12:9a:36:15:ab:13:6d:77:fa:49:45:8a:9b:27:50:
03:68:b1:59:1a:df:78:9d:84:d2:f7:d6:2b:db:2c:
46:fc:0d:63:5a:27:8a:c4:ab:5d:b4:94:e5:4c:0a:
32:4f:b9:65:09:0a:1a:d9:79:0a:c6:ff:ed:f9:19:
7b:d0:78:79:14:f4:53:d1:23:4a:ff:a1:d3:d5:a9:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:1F:D2:67:94:48:4B:61:7D:0A:CC:D1:BE:F8:09:27:11:7E:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e44a456c-1e3e-3c96-812e-fa902575fd01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:a7:38:33:ee:b0:26:a6:73:f6:ee:9f:4b:0d:e4:5c:54:b0:
79:13:f2:9b:68:d4:83:f0:c4:91:44:92:78:46:a4:ac:20:89:
11:8d:d5:62:21:d9:c8:d7:ef:56:5c:4e:2e:3c:79:81:e4:61:
af:9c:3e:72:ad:1c:f3:b5:f9:c4:94:76:85:b1:93:cf:97:5f:
c5:28:33:e6:bd:bf:dc:9f:01:8d:ee:33:3b:1e:5b:e3:d1:24:
1f:ed:76:7c:6a:62:1a:f7:49:5a:f2:0a:5e:6a:4e:78:78:0a:
2f:e0:b8:f8:90:b1:97:94:02:d7:6b:5f:e6:02:5a:17:04:56:
05:cc:7b:07:d9:5f:08:8d:20:37:29:8b:61:a2:bc:4b:05:29:
03:98:06:13:dd:e9:b3:54:0d:3a:bc:05:7c:9a:91:7e:5a:08:
a2:3e:94:1b:82:f3:85:e8:d5:2e:17:4b:78:e6:2d:6b:0a:68:
37:cd:89:3a:f3:2b:b8:1f:34:87:dc:4c:df:96:33:46:a4:92:
b4:a8:17:a7:33:8b:f4:19:0a:0a:c6:b8:e7:16:66:91:bb:2d:
92:51:4d:2f:ce:f1:1a:17:bb:09:50:67:e6:e6:71:25:6c:fa:
29:81:df:56:a6:b2:f8:c5:d1:50:c1:23:83:45:d8:3d:3f:e3:
26:b3:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:14 2025 by rpki-client