Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f158dfd3-d12e-3410-bd09-94e038c4221f.roa
File: f158dfd3-d12e-3410-bd09-94e038c4221f.roa (raw, json)
Hash identifier: jjiXgIOie89/FbEYEhh6QHXInNC+10kpc7imiIl4lQA=
Subject key identifier: B1:70:85:B9:82:6A:43:66:C3:E4:6C:0D:71:04:4A:7C:F3:66:43:3A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A10A199453380D579237880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f158dfd3-d12e-3410-bd09-94e038c4221f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.89.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:10:a1:99:45:33:80:d5:79:23:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a3f76528-4dde-4f25-9eff-d76ddb67c24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7d:bb:a7:26:32:67:a6:fd:52:87:d7:9c:d7:
73:6f:21:3f:3a:f0:c9:00:aa:5d:b5:28:08:ce:10:
fa:68:cb:52:25:1c:9a:35:e1:d9:a5:46:54:e7:68:
1b:0c:c7:a7:79:c4:96:26:61:c7:ee:f4:ab:19:b3:
23:c1:93:8d:5c:65:f9:60:8f:aa:76:ef:81:ff:4c:
48:cc:be:0c:63:3f:15:53:4d:27:04:46:41:6e:2d:
88:3d:9a:a4:77:ec:a3:1c:50:7e:61:b8:76:29:65:
6d:46:ef:4c:d3:d2:6b:96:8a:09:a0:ba:09:37:09:
9b:df:a7:1d:ea:02:9b:c1:21:ff:c9:ba:ed:72:60:
42:0f:6f:45:ae:70:c7:67:11:bb:dc:ef:8b:e0:5d:
9a:b0:42:4f:f2:fc:67:e2:65:34:05:13:ee:f8:2c:
4f:3e:5f:cd:20:ad:61:52:95:33:5e:5c:07:25:98:
f8:cf:fd:46:86:5a:a9:f2:8d:3d:01:b3:bb:b6:b1:
57:bb:4a:0e:7b:1e:9f:86:ae:cc:5e:05:06:4c:f3:
80:57:a8:0c:00:9a:01:08:c8:2b:78:b5:c4:ba:9b:
b7:10:3b:95:7a:77:44:0b:25:60:77:7a:be:c6:79:
15:66:4a:29:88:be:2a:d6:88:bb:0b:64:01:cb:f6:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:70:85:B9:82:6A:43:66:C3:E4:6C:0D:71:04:4A:7C:F3:66:43:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f158dfd3-d12e-3410-bd09-94e038c4221f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:b4:83:54:54:fc:d4:f6:f2:cb:22:8d:49:cd:6c:97:bc:05:
4b:a7:3c:83:35:e2:df:e5:13:45:f1:64:86:25:ff:42:ee:59:
d8:62:ca:cc:24:23:9c:10:f6:1a:08:f8:2e:ef:2b:43:90:03:
28:09:df:94:dc:2b:c3:8a:bb:e5:54:fe:6e:4a:d2:e6:3e:16:
c8:fe:80:bd:ce:68:78:cb:57:b3:d0:49:32:28:84:32:95:0e:
c0:7d:75:81:18:21:d6:c0:c9:d4:29:be:85:91:ee:39:71:ec:
a9:db:77:4c:6f:7d:b2:2d:04:1a:d3:6e:8c:f8:f6:04:23:2a:
33:f5:51:65:36:ed:21:cf:79:14:94:84:e4:bc:5e:88:58:85:
59:33:26:18:4a:b4:e5:de:c9:cb:62:90:5c:63:cb:14:40:53:
f7:d3:1f:04:91:91:d2:87:b0:63:ff:c6:98:83:c1:da:f4:d3:
e5:99:a8:6d:54:09:06:8b:d9:63:67:4a:c9:c4:cf:46:bf:34:
f2:bd:1b:7c:a1:b6:46:d1:df:29:d4:d4:e7:ca:fe:39:98:bd:
0b:4f:af:a8:94:18:98:33:b5:2f:61:4a:79:5e:24:5e:ba:bf:
cc:b3:76:51:31:7e:f5:3e:c7:8c:cd:a0:8a:6e:2c:d4:a3:f6:
78:d6:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:33 2025 by rpki-client