Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec3b7935-8b44-32dc-8c62-5e4be4bdd361.roa
File: ec3b7935-8b44-32dc-8c62-5e4be4bdd361.roa (raw, json)
Hash identifier: 5x44TzOBF/pKqonAaNq6zbCdqOYlgXx/vij+sSLd7ck=
Subject key identifier: EA:DA:71:35:79:40:91:28:7B:E5:70:5A:A6:76:09:66:3A:E5:68:F5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A13007A8CFFDE8EDE951500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec3b7935-8b44-32dc-8c62-5e4be4bdd361.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.106.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:00:7a:8c:ff:de:8e:de:95:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b4e55181-c2c9-4056-a613-79f2d0c9d3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:cc:20:5b:81:66:fb:aa:b9:06:16:48:04:
69:0a:76:81:b5:7f:2e:2d:df:00:26:ad:f6:b1:14:
96:89:0f:24:f1:33:1d:4b:48:a1:82:16:34:64:e3:
f4:39:ba:d6:64:a3:1a:54:d9:a9:ae:c8:e0:19:46:
30:5c:1d:cf:fd:31:de:63:37:25:b5:fe:d8:19:60:
74:46:18:ec:1d:06:6a:25:3b:94:11:34:ca:f5:1d:
fe:2a:1b:86:bb:92:70:44:57:77:06:b5:8c:23:6d:
a9:d6:fa:09:0d:69:31:af:d6:69:8d:01:0f:6a:2f:
1f:1f:a3:e5:ac:7e:57:ee:68:c2:08:49:b5:d6:4d:
74:6d:b2:c1:39:fb:94:17:38:36:ff:dd:3c:5a:73:
14:1a:d0:d9:9a:89:39:f2:1d:25:02:9b:de:ba:7f:
0e:14:09:fa:cb:74:c3:83:2a:61:51:80:a3:3e:f6:
29:39:b0:f6:cc:b0:3a:b9:ba:f4:a8:2b:a8:39:89:
fb:d5:8e:2b:3b:54:23:63:5a:78:d4:7c:48:85:56:
fb:28:cf:65:29:70:81:ac:af:7d:2e:f9:a1:a2:da:
a2:f7:d1:26:da:af:bb:30:43:10:de:89:6b:9e:09:
c7:a5:b0:5b:ad:2b:77:9c:d7:1f:8c:1a:6c:35:57:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:71:35:79:40:91:28:7B:E5:70:5A:A6:76:09:66:3A:E5:68:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec3b7935-8b44-32dc-8c62-5e4be4bdd361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.106.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:f2:31:e3:7c:34:35:94:96:c7:7a:50:11:17:a8:17:8b:87:
c7:c8:72:92:f0:ad:96:67:71:6d:5c:34:8c:f4:f7:f7:bb:ff:
f5:2d:f4:7c:ba:98:ee:64:f5:34:41:96:5b:6c:7b:ed:08:87:
c3:c8:c8:1d:13:67:81:56:81:e3:a5:49:09:12:67:91:05:ce:
13:af:24:bf:4b:1c:d4:25:5a:55:08:9f:b1:ce:da:a5:97:cd:
07:33:73:08:33:5c:76:70:03:57:fc:6b:95:b4:91:e4:6f:86:
79:72:81:d0:b4:be:b5:16:67:6b:ba:1c:b3:38:90:6b:9c:e0:
33:e6:0c:65:b9:fa:03:f9:d2:90:90:ce:69:ea:5b:bc:b2:31:
d9:25:2c:3f:4c:d4:43:06:0d:59:8f:ae:ed:ff:01:c7:01:7e:
2d:32:7a:bf:69:89:e2:44:8f:1c:2a:ff:39:bb:99:65:40:32:
f6:59:aa:ea:87:05:0e:e8:1c:2a:07:37:b1:50:73:c4:83:ba:
df:90:41:00:b3:b5:df:41:de:5a:2e:cc:e0:ec:83:22:4a:f7:
61:58:cd:2b:c5:64:f0:f3:e4:84:bf:b7:f4:4b:6d:b3:44:d9:
2c:ad:c8:b8:c4:ae:68:73:4d:e9:82:9c:28:46:80:8d:72:22:
d1:03:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:02:23 2025 by rpki-client