Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f60a1774-045f-3963-8d47-1b0a4b5efda9.roa
File: f60a1774-045f-3963-8d47-1b0a4b5efda9.roa (raw, json)
Hash identifier: i4kIOai4JB6bfBPZOqLC+n8o/1p9qDVamL0Jl3kJ1cE=
Subject key identifier: E9:CD:FB:36:C2:EE:4E:67:0E:93:6E:95:47:27:36:A6:79:63:C0:7A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A27F921E63AEB92EC173100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f60a1774-045f-3963-8d47-1b0a4b5efda9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.84.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:f9:21:e6:3a:eb:92:ec:17:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ba926d4a-ea42-4575-8088-d1cff16bb66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:8e:2c:32:7d:f9:22:09:ea:cc:ce:6d:08:
c7:0a:20:08:84:cb:31:17:c2:f6:bd:69:41:e5:11:
7a:8b:dd:88:6b:84:a2:76:23:ac:3d:c0:cc:b5:12:
a0:7e:1d:47:6a:f8:74:47:4d:70:54:9d:9e:17:b0:
52:b9:e7:73:38:5b:07:30:ab:f5:c6:d8:c2:2a:ea:
76:93:da:89:83:81:56:f2:69:6c:43:fa:92:63:dd:
41:cf:f4:33:8f:69:57:5a:cd:75:09:23:6b:28:bb:
3b:4b:a3:2c:d9:93:c9:e6:07:ff:c9:f3:0c:2d:29:
84:8b:04:f4:0b:4d:a1:91:5b:53:0c:fe:b9:1c:d0:
7c:88:32:15:3c:2d:da:60:42:eb:e8:c5:7c:12:2a:
ec:57:d1:96:47:df:68:f5:9f:0c:97:97:f3:2d:2b:
f7:8b:48:0b:ee:6a:b8:2c:c1:3f:bd:d8:85:e0:c5:
d7:b7:cc:fb:77:0f:0d:b4:b1:a4:4e:f0:e8:af:43:
b6:59:32:8b:5b:7d:2c:22:29:05:37:d2:e1:f3:da:
0d:04:f1:2d:4d:17:cf:a1:7d:05:fe:3b:88:b6:dd:
6d:4b:95:d1:b3:5d:60:6c:da:83:49:e5:be:78:a6:
94:71:82:48:40:08:52:69:ad:f2:ef:9b:c4:98:65:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CD:FB:36:C2:EE:4E:67:0E:93:6E:95:47:27:36:A6:79:63:C0:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f60a1774-045f-3963-8d47-1b0a4b5efda9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.84.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:40:fc:f4:bc:65:15:4e:19:80:35:79:0b:ac:7c:87:11:b2:
af:19:3a:d5:62:c6:5a:1a:a3:0b:08:51:4e:17:7f:1e:a3:d7:
ea:85:84:d2:25:05:25:c5:c1:17:5a:89:9b:04:18:a4:bd:36:
c5:34:78:28:8d:2b:03:42:43:dc:26:00:7a:60:ab:49:37:fd:
c3:44:ea:44:78:c4:5f:d0:d2:b6:a4:1b:1a:db:10:f9:46:8e:
01:66:ce:d2:78:98:c3:69:d8:94:9b:12:5d:c5:c4:f9:32:14:
fb:81:fd:f5:bd:d4:b6:3d:6e:e5:54:55:a1:30:66:1e:a7:87:
0d:51:3d:c3:70:2b:ed:dd:87:8b:b8:32:38:66:67:7c:dc:73:
be:0c:b8:3f:3c:9c:fd:04:f2:65:68:09:de:48:c7:a8:58:7f:
da:99:10:c8:1b:c7:29:bd:5a:6b:83:36:ce:3b:ee:aa:a7:81:
80:56:3b:8b:25:ac:ba:3c:c2:92:5e:b8:58:75:c1:ed:59:f5:
66:31:8e:51:98:ae:5a:ad:be:06:9f:ec:a2:75:77:3c:78:62:
9a:ae:43:77:d9:90:bf:24:da:23:e3:ed:4a:11:b5:44:34:51:
ee:14:49:0f:bc:7f:57:64:aa:84:d3:29:b9:7c:5a:ce:28:6b:
59:e6:0d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:32:36 2025 by rpki-client