Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecb92732-4a21-3f74-ba0c-2cbe223a4995.roa
File: ecb92732-4a21-3f74-ba0c-2cbe223a4995.roa (raw, json)
Hash identifier: +lutoegDI8A2Pi/Lpbtt5/VGxH3j0oeIlVVJN3BFp2U=
Subject key identifier: E7:AE:D6:3C:B7:A5:75:83:C9:B8:C9:88:D4:65:F8:3B:C2:FA:4F:62
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A584AC398226F04091D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecb92732-4a21-3f74-ba0c-2cbe223a4995.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.154.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:58:4a:c3:98:22:6f:04:09:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=6976826a-6fac-4eba-a80e-378cedf0fb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:e6:e9:67:d5:af:7f:06:11:6c:c5:90:73:
26:4e:bb:39:fb:b4:d3:05:8e:d0:68:f7:74:d3:f9:
08:4a:99:17:88:f2:9a:4d:12:73:50:2b:56:22:a5:
b3:69:d1:2e:6d:0e:c1:da:5d:a2:38:6b:3c:38:9e:
e4:5c:10:b4:78:0a:64:02:22:82:09:a9:0c:94:a7:
25:95:21:c5:d7:1c:d5:ab:6a:1c:69:70:96:38:00:
ce:a3:76:6f:91:3f:7e:f9:3e:02:35:4a:95:e2:8b:
cd:58:24:8b:c0:62:32:12:ff:e2:22:76:85:bc:df:
b8:4a:3f:82:4a:b8:f1:05:29:c8:76:fd:c3:49:e1:
08:26:fe:72:45:e5:a7:10:50:c0:07:cc:78:f5:e5:
bc:ca:35:f0:60:af:ed:ba:bc:97:07:7b:c7:ed:5e:
00:35:70:13:49:73:32:f0:2f:df:46:99:62:49:e7:
f4:d3:9f:ee:8b:dd:61:26:64:40:f0:cf:5c:fb:ad:
4c:17:ae:35:99:98:3a:33:a5:a1:31:91:46:4c:2e:
cc:12:42:f5:ba:77:c0:60:fb:52:26:50:9f:2a:59:
ff:b3:c1:3a:18:4a:97:b9:ac:5f:14:29:9e:8a:9f:
19:97:60:33:7b:a7:98:f6:ba:a7:96:39:49:58:17:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:D6:3C:B7:A5:75:83:C9:B8:C9:88:D4:65:F8:3B:C2:FA:4F:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecb92732-4a21-3f74-ba0c-2cbe223a4995.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:93:c9:7f:7f:1e:be:4a:36:3b:da:cc:c1:68:82:7d:07:a8:
07:8a:34:3b:65:85:f5:1d:49:2c:88:b1:9b:e5:a3:24:4b:7c:
56:2d:11:f7:4d:99:b6:91:51:04:8c:e9:ca:37:cf:79:c4:6d:
a1:6b:a2:d4:99:2d:29:e5:a5:cf:72:17:cd:ee:8d:9d:a0:a1:
25:91:d6:92:a6:0c:64:fe:9a:68:09:5e:ab:88:7f:55:2d:62:
53:dc:3e:b2:06:6c:47:82:6d:7f:ff:e6:86:c4:08:99:4c:d8:
9d:0c:85:d8:a0:8e:54:47:47:94:84:be:af:07:77:31:f5:41:
26:94:10:e6:16:64:9b:73:52:0b:85:ff:bd:a5:de:ca:b8:5f:
f6:09:56:51:4d:b4:13:a1:a3:c0:16:49:40:ab:1c:56:34:10:
25:8b:da:2c:c6:5a:8e:d1:9d:7e:ba:5b:10:89:df:a8:05:32:
6a:4f:ac:d6:53:ee:10:02:50:3e:67:e0:69:20:ca:58:e9:86:
f8:d1:b5:39:0b:fa:eb:09:66:88:b1:d9:e8:c7:30:37:e0:73:
53:50:7f:f4:7c:84:2b:64:38:0d:41:a7:b7:38:3c:cf:82:a1:
1e:68:fa:2b:ad:80:b3:18:9f:44:60:09:50:af:c7:07:45:7d:
0c:14:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:10 2025 by rpki-client