Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f20d86d5-04b1-3cc3-9504-8d4357cca879.roa
File: f20d86d5-04b1-3cc3-9504-8d4357cca879.roa (raw, json)
Hash identifier: sIgiVwH5V31QGv9+1Q4FtjMwGDJz2NKtEde1L+xGqWk=
Subject key identifier: 68:B9:ED:FD:26:DA:7A:18:39:53:90:49:6E:54:63:16:3D:CA:F6:F9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A05B27F777A12BB1B2FA880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f20d86d5-04b1-3cc3-9504-8d4357cca879.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.67.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:b2:7f:77:7a:12:bb:1b:2f:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a52d0368-732f-4f89-bde7-46e8ac4f90c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:9f:f7:46:09:2d:e6:d4:0b:fa:58:6b:1d:
bf:79:3a:c0:e7:67:3d:b1:0b:43:f7:15:ed:d6:4a:
4f:b6:1e:48:48:ce:25:3d:95:b5:84:be:65:53:f9:
aa:e3:b5:ca:0f:2f:ff:b6:5c:c7:be:a0:9a:8a:7f:
47:9c:d8:d0:a0:38:17:ba:f5:d5:59:19:f6:9e:2a:
bc:ce:51:b5:05:f4:80:c8:ea:5b:94:eb:6e:77:3d:
ad:9a:ba:1e:cb:7c:27:ae:80:af:26:38:78:20:73:
f9:7b:81:18:04:db:80:27:2c:85:05:18:58:27:b5:
22:25:e0:5a:45:e9:45:da:c1:e3:d3:96:49:7f:5f:
1b:c5:d2:59:f9:bc:46:ed:4a:a4:49:d7:cc:42:95:
62:ee:2a:e4:20:27:cc:51:6c:e9:b0:b9:b5:76:f6:
18:9b:b2:86:8c:a0:50:aa:f9:a2:e5:9c:3f:66:8f:
d7:64:e6:4b:ef:9e:52:5a:83:8a:34:90:33:94:18:
f5:87:56:99:24:ec:87:9b:1b:05:a6:6e:2f:1e:10:
52:83:86:9c:dd:3a:da:cd:6e:e3:d0:da:f4:9c:cf:
9e:72:92:b3:e7:1b:db:00:be:55:76:34:14:94:8f:
1e:63:8a:fe:69:da:15:21:b9:64:d2:ef:1b:64:9c:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:ED:FD:26:DA:7A:18:39:53:90:49:6E:54:63:16:3D:CA:F6:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f20d86d5-04b1-3cc3-9504-8d4357cca879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.67.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:08:82:ea:68:e6:d8:06:04:e2:f2:0e:27:1f:a3:a2:f7:d2:
6b:f4:9b:0c:8c:1a:5e:ab:ae:d3:df:a4:00:ac:bc:cb:81:f0:
db:3d:7d:18:b1:8f:cc:cb:82:a5:fd:5d:5c:9c:34:1d:f6:d0:
a0:35:9d:c7:57:9e:55:38:7f:7b:2a:02:fc:be:b8:a0:fa:85:
d9:cd:3c:06:8b:01:b1:19:70:09:55:af:de:97:b2:6a:28:f6:
3d:21:be:28:95:93:e4:90:67:fa:f4:7d:7b:9f:05:f0:49:73:
ef:09:00:9c:69:9c:8c:73:dc:df:fc:78:df:fd:7b:02:f9:a8:
61:89:1e:52:ba:ff:6f:00:e4:a5:63:57:15:08:0d:8f:cf:3e:
18:f2:1f:c1:46:7e:c0:4f:28:62:32:1e:87:cb:d6:d6:f9:8d:
57:b2:d7:93:d7:6d:dd:a5:4c:cc:6b:17:96:51:b6:05:53:32:
59:23:af:d8:29:8a:84:5e:66:4a:ea:16:d9:5e:0c:de:0a:aa:
71:ae:ff:ef:e9:38:4a:18:98:1f:54:df:29:21:6b:1d:f0:1f:
37:13:e2:c2:e8:ec:4f:31:f5:98:15:00:ed:26:e8:86:af:82:
e8:34:18:e9:7d:02:ab:4a:c4:0c:7f:a3:4e:82:83:1c:18:41:
99:11:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:13:34 2025 by rpki-client