Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef84cb6a-3478-3535-acde-7be8441cb406.roa
File: ef84cb6a-3478-3535-acde-7be8441cb406.roa (raw, json)
Hash identifier: AD0WP9/3U2KeeLo4ia4Z7aS9KX/nAjkzdCQvbEmb+qE=
Subject key identifier: 22:2E:9B:35:26:A7:DB:D1:E3:CE:E7:F8:96:57:95:AA:91:A6:FF:90
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0867FE4CCA7A67C8382B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef84cb6a-3478-3535-acde-7be8441cb406.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.120.0.0/13 maxlen: 13
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:08:67:fe:4c:ca:7a:67:c8:38:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d57c337e-c79b-4934-bc1d-9003c10da93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:67:c0:83:2a:49:0a:4d:24:9b:e0:fe:3b:33:
21:c7:62:7d:4b:a8:32:92:be:5e:0b:1f:6c:bc:a7:
df:ad:ab:12:84:ac:aa:f3:19:ec:0c:5a:b8:46:f1:
f7:d1:aa:58:bd:51:da:ea:9b:80:53:fc:3e:8c:49:
a6:af:01:7d:5a:17:54:09:5f:e9:63:77:fb:1a:22:
5a:9d:0e:2d:82:f3:19:2e:b9:2f:93:7c:ef:1b:1b:
cb:cb:8d:97:43:4d:e9:97:c7:05:5b:0a:bf:1c:1d:
00:87:20:08:70:dd:35:c4:02:3a:9d:b2:7f:af:db:
84:18:23:be:8b:e2:d4:38:24:b2:0b:7c:32:51:06:
28:2b:f2:02:33:46:4d:55:08:c5:be:22:a8:b6:92:
9e:b4:39:8a:73:b1:e7:41:15:7e:02:7b:fa:b0:7f:
1b:26:ca:21:a8:3c:88:2c:48:67:af:39:ae:d9:c7:
9a:d9:12:41:ba:9a:3a:ca:9d:6a:94:d5:12:aa:47:
6f:ec:8c:85:d6:6e:3e:bd:c0:9e:a1:f4:18:fe:db:
5e:0c:8d:24:2c:f8:45:8d:32:38:4a:99:bb:db:cb:
86:87:65:9d:cb:94:83:66:38:31:ba:14:31:b7:a4:
83:4c:0e:2d:9e:90:29:13:a8:89:a7:c1:72:25:51:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:9B:35:26:A7:DB:D1:E3:CE:E7:F8:96:57:95:AA:91:A6:FF:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef84cb6a-3478-3535-acde-7be8441cb406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.120.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:60:67:76:2e:d4:68:bb:b8:e8:2e:86:35:2d:5f:cf:a8:4c:
85:0a:3b:ba:32:e8:c9:07:72:d4:1f:93:20:ca:e1:6d:78:8e:
91:22:90:00:ee:cc:3f:42:8c:dd:1d:3a:54:84:cc:b8:7d:ce:
71:23:b0:4c:42:16:d7:e0:d7:3e:bf:4b:b5:6a:09:e8:34:23:
45:9c:26:cc:38:fe:1e:36:99:aa:74:e0:f2:bd:bf:97:0f:28:
48:c8:e0:bd:3e:cb:d8:b3:a1:56:e5:24:d9:87:50:bd:6a:82:
a1:9a:40:77:c2:92:a3:f4:9f:41:a9:80:f9:60:f4:2e:4e:da:
83:04:c1:13:72:6c:6e:36:e8:bc:9f:ed:02:4a:71:a5:61:7d:
8c:3e:33:0a:10:72:09:ce:df:cc:0b:8f:8f:34:0a:63:b7:94:
d7:34:a3:50:27:09:f0:04:23:1f:d2:4e:81:7b:f5:fc:17:0a:
e7:ff:62:5a:bb:7a:2e:64:cf:08:f2:46:bd:a6:96:32:44:3a:
bb:79:bc:18:e1:b7:56:0d:01:ea:74:64:ab:c7:85:3c:9e:f5:
e8:88:33:b3:f5:49:fc:a5:75:c6:66:1c:7b:50:0e:34:cf:e3:
31:91:55:39:bb:55:b0:bc:d9:d5:7b:ca:0d:e1:d1:ce:b6:37:
81:c6:bc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:32:43 2025 by rpki-client