Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8d684d9-3a08-3e39-a548-36750741abd1.roa
File: e8d684d9-3a08-3e39-a548-36750741abd1.roa (raw, json)
Hash identifier: r550EHRlG+PintDpWTEVmlnh/Sik99JJLmDc/mRD5LI=
Subject key identifier: 03:A9:0B:28:6B:06:5F:CA:42:4B:8E:2E:0F:72:F9:E5:D8:A7:E3:09
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F785DFCDA355AA0EF8BD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8d684d9-3a08-3e39-a548-36750741abd1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.68.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f7:85:df:cd:a3:55:aa:0e:f8:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cd1ef31a-d7d2-4133-ac0e-55ee3f374428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:84:c2:25:a6:7c:49:82:db:12:1e:aa:ee:
6e:84:e5:f4:30:2a:cf:97:2b:4e:d9:23:4e:0d:e4:
65:96:3e:21:57:b5:6c:6f:33:6f:ea:8d:dc:64:16:
93:c5:db:af:b1:a4:77:7c:7a:3a:dc:d3:16:eb:b7:
ce:f1:78:8a:92:16:9d:0a:06:b3:a6:f6:56:7d:40:
8d:bc:e4:df:e8:bd:2d:54:3d:7a:b0:62:d5:57:66:
44:3a:18:fd:36:0d:34:3c:0b:09:eb:b0:1c:86:51:
cf:d0:c7:78:63:9a:b0:39:19:80:27:66:a1:bc:2c:
63:71:5f:ba:a9:99:11:a0:86:22:af:8a:4a:87:e0:
79:5d:9f:10:3c:fc:1f:91:fd:0e:6e:9e:fc:0c:21:
26:7b:5c:51:14:f4:50:c7:c8:0e:fb:a9:ba:02:85:
3b:a2:df:6c:b7:93:c1:bb:5f:f5:ee:30:08:ef:1b:
85:7a:1e:00:cc:06:81:c6:28:f1:be:32:31:9e:2b:
66:ff:be:45:94:d1:73:dd:4f:20:a3:6a:5b:4d:b0:
6a:c7:e6:4f:ec:e3:de:f1:87:71:fe:65:08:55:f9:
7f:2f:e9:c4:a9:d7:90:85:8b:77:7b:dd:a4:cd:36:
f0:a0:cc:e3:3b:c5:56:d1:f4:70:ed:6c:84:d1:d7:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A9:0B:28:6B:06:5F:CA:42:4B:8E:2E:0F:72:F9:E5:D8:A7:E3:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8d684d9-3a08-3e39-a548-36750741abd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:42:1c:35:54:d8:3c:07:5a:c6:82:4a:6a:9b:4c:bc:2f:87:
d9:3c:44:0a:31:01:08:02:72:5a:4b:2d:be:49:77:7c:e0:bc:
14:3e:03:a3:65:51:f8:bf:01:b3:11:21:56:3c:65:f6:2f:7d:
13:d9:f3:72:c2:a4:66:59:b6:a0:ca:39:43:5a:97:5a:78:57:
f1:8d:cd:d8:9d:e8:cf:c8:36:1d:b2:83:4f:35:2d:3c:4c:80:
51:d2:fb:a1:2d:da:0b:58:2b:1a:49:83:02:15:e0:e6:e9:0e:
9e:aa:19:31:19:c8:7f:eb:85:35:09:5c:f7:9a:6e:bc:fb:d0:
cb:55:60:80:c4:80:aa:d1:a9:92:de:24:8b:bf:2c:ad:53:9a:
52:f3:bb:21:b4:df:da:70:4f:96:61:79:74:d9:08:17:45:9b:
0e:d6:e0:f8:01:30:19:20:0d:0d:f7:77:da:9c:d4:c7:6a:70:
6c:46:70:3f:df:47:ea:f3:1f:c1:70:9b:0f:39:c9:c5:24:6b:
46:5b:bb:c3:af:e6:cd:4c:21:c5:dd:f9:61:0e:95:dd:7b:86:
b1:84:73:50:6f:ee:5c:04:f1:5a:ea:8a:f3:9a:0f:dd:59:43:
43:74:97:3a:3c:1e:ca:67:1c:4a:e0:74:0b:6f:bb:f5:83:b7:
0f:01:0a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:02:18 2025 by rpki-client