Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f56b7963-e99c-3f35-b127-44ded3639818.roa
File: f56b7963-e99c-3f35-b127-44ded3639818.roa (raw, json)
Hash identifier: FXnzmv6PjAvLiH51wSPQQ2KrVAkQQcdl3uBaRJTHGSQ=
Subject key identifier: BA:22:C9:05:43:7E:F1:69:EC:FD:E0:2E:34:93:64:6C:9E:D7:26:42
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720A1757F6C9927AA4AB9BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f56b7963-e99c-3f35-b127-44ded3639818.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.175.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:17:57:f6:c9:92:7a:a4:ab:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=c10d3353-044a-4715-94fa-e12ee92ff1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ac:20:e1:95:6e:b2:ef:d0:b8:86:84:22:2f:
54:35:f6:0b:de:9a:dc:4f:23:82:9f:e5:d4:37:4a:
08:33:11:bc:00:7f:1b:af:97:56:f1:b7:a3:55:a5:
5c:02:ad:8f:fe:be:f5:da:0f:b1:ae:68:d6:71:eb:
07:a5:56:e2:9f:f0:a3:18:33:1c:69:7d:91:cc:1d:
1c:75:07:82:61:1c:25:20:99:6e:0a:86:5f:60:5c:
2c:ec:ed:31:a0:35:8f:67:c7:16:5c:5c:53:0f:8b:
bb:3b:5b:1a:de:0e:12:6f:0c:13:bc:6f:17:78:ce:
42:51:03:43:de:54:db:0c:d4:92:22:5f:e0:04:46:
f5:e3:28:60:14:47:35:1d:03:66:f2:df:11:0a:95:
7b:8f:7c:21:63:f7:f7:07:9f:53:85:36:76:55:70:
47:a5:40:ec:f3:25:3e:8f:c6:c9:b1:27:c8:93:49:
51:4f:9e:0a:18:07:d0:87:80:e2:bb:c8:37:9c:42:
23:cc:ef:be:af:09:64:f8:66:a7:94:5c:5e:ca:f4:
dd:a4:c5:c3:1f:17:88:a9:7b:50:ff:65:76:a8:31:
15:28:dd:e8:c6:a0:52:59:7e:11:af:68:29:e1:18:
bb:80:f2:62:d9:52:d7:b2:6a:fe:27:f8:7b:28:e3:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:C9:05:43:7E:F1:69:EC:FD:E0:2E:34:93:64:6C:9E:D7:26:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f56b7963-e99c-3f35-b127-44ded3639818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:b9:74:6f:26:66:0d:d1:d5:09:09:9c:76:99:e5:f2:e8:a5:
e5:b4:3f:4e:c5:dc:98:c0:bf:7b:07:3a:5f:52:43:6c:13:af:
9e:da:e9:7e:d6:a0:e4:6d:3c:59:2a:66:ac:f2:c9:88:3e:49:
ea:80:d3:8b:b8:8d:27:b9:c9:02:6f:d5:11:11:58:fa:9f:5f:
3e:8b:82:48:56:e2:4f:9d:ee:0f:c6:ee:c2:c4:0d:2b:88:46:
a2:fe:97:22:40:f4:27:86:09:6d:2a:10:d2:c6:18:b7:36:8a:
c6:2d:e6:94:4c:f7:13:b4:de:d6:19:83:60:45:b2:15:ca:95:
b1:50:03:84:78:53:3a:fc:b5:0c:9f:1d:28:69:cc:82:17:c5:
5f:25:d4:c5:39:89:10:80:85:63:3c:de:b7:2e:f4:2f:b6:db:
f2:d3:6a:65:20:9f:65:69:f9:9d:eb:f3:30:e3:38:81:2b:c1:
a2:50:18:35:1c:93:41:2b:c3:3c:0e:e8:1d:f8:74:92:1a:c1:
15:5b:49:39:20:da:3b:c7:3c:fe:1a:6c:be:54:1f:b1:40:d3:
23:58:c7:5d:e1:40:ed:89:aa:60:09:06:37:ca:df:ca:bd:b3:
63:c9:3c:8a:a3:a6:75:39:92:23:1c:13:4c:83:87:45:58:09:
7e:e4:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:59:12 2025 by rpki-client