Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e87e855b-0299-3028-a4ea-097c74c4925a.roa
File: e87e855b-0299-3028-a4ea-097c74c4925a.roa (raw, json)
Hash identifier: iBSFhxOv52GImXsxzTkgjuXRAPyuRRJ1LG2Nbwsa3gw=
Subject key identifier: B3:19:3D:63:C4:A0:60:15:DC:94:DC:0E:E7:A1:8A:C8:25:33:2C:1B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A187805CDA80DB0CD2BDF18
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e87e855b-0299-3028-a4ea-097c74c4925a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.107.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:78:05:cd:a8:0d:b0:cd:2b:df:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e2fe1d0c-0fe9-422a-9fee-d462a17cc06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:14:0c:16:f5:33:91:9c:d1:fb:bd:6c:6a:
ea:72:00:3f:d1:3a:c7:87:6e:42:f7:4d:79:ab:d5:
68:bd:59:ae:de:af:a7:16:4f:b2:51:79:e6:96:65:
b4:8c:49:11:6a:ea:6f:19:df:c6:74:6c:d0:bb:0b:
d2:95:1c:6e:a6:6d:99:d4:43:1f:d2:ae:fa:01:88:
7c:de:9f:e7:97:58:06:f5:39:3d:e5:46:af:19:87:
26:f2:15:db:be:e8:8a:86:b7:dd:b1:3c:29:a2:ac:
6e:54:ca:fe:f3:57:2f:ca:e1:99:03:78:22:d2:a8:
20:c9:43:a7:f9:d1:c4:06:37:e6:36:7c:08:ad:e3:
d6:70:eb:13:6e:18:dd:ac:18:ab:f5:bd:60:d2:71:
13:48:ec:ad:82:c4:28:49:bb:d3:e9:2c:c8:27:42:
f5:c7:96:ba:86:63:75:be:76:6a:0a:85:5f:57:d7:
49:04:45:5a:54:06:9e:4e:9e:94:fc:e3:9a:f0:d1:
74:75:5d:7c:9c:64:08:02:37:ce:c5:59:ac:b3:da:
26:1d:34:cd:90:b4:a8:21:37:98:9b:f0:31:a4:72:
a5:50:91:cd:d9:6b:e8:12:b9:7d:24:48:69:83:68:
42:08:5e:c8:aa:23:99:5c:80:57:70:3e:89:48:91:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:3D:63:C4:A0:60:15:DC:94:DC:0E:E7:A1:8A:C8:25:33:2C:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e87e855b-0299-3028-a4ea-097c74c4925a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.107.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:1c:08:8c:38:59:11:af:45:69:d7:87:f2:11:68:b2:c0:26:
d5:80:d5:b6:35:6a:c7:df:d0:ef:21:bd:10:20:03:db:14:6a:
4d:19:11:b4:3a:72:eb:d5:66:45:b9:d2:15:44:21:d5:4b:1b:
86:6f:b9:2a:fb:43:27:19:23:f0:6c:14:b3:72:75:24:b1:4d:
a6:de:29:e0:4d:67:03:d1:52:67:e8:be:65:81:65:e2:a8:1a:
4d:24:85:c4:c2:5f:b7:89:1b:50:04:3e:ff:de:f0:6f:da:62:
52:ac:e0:6a:b8:0e:f3:58:81:86:4a:86:4c:ba:ea:8d:6a:f1:
35:e4:86:35:73:3d:8b:15:09:10:f8:5e:4e:fe:7a:f1:bf:06:
bd:19:17:6d:5c:9d:d7:e1:4f:b8:b9:dc:21:70:2b:e2:58:15:
93:37:21:b7:cd:9d:da:0b:1e:19:12:8e:0f:30:a4:af:83:c9:
06:a4:54:38:a5:92:58:cc:aa:6a:8a:90:54:f6:e6:8f:d1:4b:
e3:7a:43:ac:8d:7f:2d:b8:6f:c7:cf:3a:3b:19:d1:f6:fd:fe:
f9:37:f4:99:cf:4a:b4:74:4e:fb:f5:9d:b6:61:1f:87:86:b8:
75:d5:62:02:4c:cb:ec:8f:88:4c:57:16:ac:0a:84:3b:c2:82:
9c:7c:86:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:01:43 2025 by rpki-client