Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef35ebff-23ae-3b35-a1a6-96bf4b9a2efa.roa
File: ef35ebff-23ae-3b35-a1a6-96bf4b9a2efa.roa (raw, json)
Hash identifier: EQAghY8igCBMKf7pgSgq8VlkADJdDkwh55RsNKo/BhU=
Subject key identifier: 5E:50:32:50:D1:CE:05:4A:63:A8:77:44:4F:C8:4D:13:14:EB:C1:01
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B2508353BCBCFD88E2E180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef35ebff-23ae-3b35-a1a6-96bf4b9a2efa.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.94.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:50:83:53:bc:bc:fd:88:e2:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=04d095c0-fba6-4bdb-ab5b-7924efe934b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:18:e2:de:8e:e4:c1:e0:9f:92:a6:40:57:
6b:b0:6f:86:58:e6:0b:fb:8d:41:bc:d4:cc:23:b4:
40:ea:06:d0:2c:77:4f:30:1c:26:83:5f:61:51:ea:
e4:ad:2b:e1:45:47:87:ad:80:35:15:6b:48:ed:df:
28:ab:93:d7:04:72:8a:6d:82:85:70:fe:72:cd:69:
ff:de:67:20:43:d8:e9:5f:86:7d:f7:67:a8:8b:93:
84:e4:32:2a:f8:bc:12:e8:ee:54:37:d9:36:3d:b6:
e7:ce:a0:76:76:3d:0f:f5:26:16:c5:90:af:6d:52:
d7:ae:26:e7:ad:f6:03:5a:07:58:88:e2:a8:d1:f0:
3a:50:8c:50:85:49:ac:de:57:f2:0f:84:6b:21:08:
13:52:1c:dd:dc:43:6d:c7:72:da:20:c2:00:0a:d3:
c2:c7:19:cb:1d:07:3f:c3:84:47:9e:4e:56:c8:a5:
3d:46:06:06:6c:8b:91:89:a6:46:66:d5:28:34:7c:
d4:cc:c9:cb:8a:0d:cd:31:b4:fb:a1:67:87:2d:1d:
23:dc:51:91:ce:be:4f:73:cd:9d:c2:b3:c4:82:67:
41:70:8d:3b:c0:29:45:bd:36:57:68:36:ea:73:05:
47:5f:44:e6:06:bd:71:28:f7:d7:7d:3d:b0:70:30:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:32:50:D1:CE:05:4A:63:A8:77:44:4F:C8:4D:13:14:EB:C1:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef35ebff-23ae-3b35-a1a6-96bf4b9a2efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.94.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:59:d7:bd:db:c4:0b:8b:cc:9e:74:2f:5f:74:b2:87:60:35:
b5:f4:b4:7e:38:66:91:e1:ac:ec:64:d3:89:f3:c2:a2:fb:e2:
a9:00:4d:e7:ae:b1:27:10:98:7f:1e:c4:09:3d:ae:b8:42:3c:
b3:81:e5:e3:1d:80:cd:58:c2:87:6d:03:24:f6:09:8e:f6:9a:
c8:1e:1c:2c:a2:8b:71:0f:da:26:22:ad:31:b0:63:bc:60:89:
69:d5:c8:36:25:c0:8b:28:2c:87:a4:52:3a:ff:df:96:3b:8d:
79:85:b0:16:17:f9:a0:c4:cb:5f:c0:04:b0:93:43:74:66:36:
bc:03:94:8f:a7:34:e9:3c:39:9e:77:b8:22:78:17:7d:0c:09:
48:b1:44:32:7a:d3:8c:f8:11:28:b9:00:00:94:0a:33:af:df:
03:81:84:cc:3f:61:a9:e7:f0:16:87:37:54:19:78:6c:5c:72:
43:96:68:2b:f8:b3:62:e3:23:5d:24:ea:0e:ba:78:b4:03:a6:
e9:0c:53:30:a9:6d:6f:e0:43:f7:bd:ff:f7:63:97:e6:83:c0:
8d:92:68:9a:12:6a:90:9d:6e:9b:35:92:a7:3c:e9:95:32:72:
f4:db:0b:d4:91:0e:f6:01:05:3e:41:9c:ca:95:0a:aa:b7:7b:
6b:eb:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:49 2025 by rpki-client