Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8e1108f-5351-3920-945a-22b983554b6e.roa
File: f8e1108f-5351-3920-945a-22b983554b6e.roa (raw, json)
Hash identifier: tpwnvcu+q0uY/rs9VA6psQCPD0YoWanNMNyZzOjFfe4=
Subject key identifier: 59:E2:16:F2:35:6F:6D:AA:B1:0D:AA:94:FE:85:88:DE:85:00:FE:60
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A01063C3AA52117BA337FC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8e1108f-5351-3920-945a-22b983554b6e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.89.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:01:06:3c:3a:a5:21:17:ba:33:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=47f7eef1-a0c8-4dbc-aee8-6aee916c67e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:13:d0:23:48:1c:4a:a9:f8:90:52:5a:9d:6c:
cd:f2:dc:f9:60:c7:e3:c8:4f:7b:2a:af:a9:47:e0:
24:7e:0d:2d:6f:37:68:46:65:5c:4c:e4:ae:17:c9:
51:9b:a8:e3:4c:fa:96:6c:3e:06:61:29:84:f7:aa:
23:dc:d1:5e:cf:df:f0:c3:6a:8c:4c:ec:1a:7d:c1:
89:70:c6:b2:a2:7d:9b:63:9b:64:6a:4a:c6:ed:92:
c7:67:e7:fc:13:42:97:83:28:bc:e6:8e:f2:d3:4a:
a5:74:1e:d4:f3:60:9e:df:36:be:14:ec:a8:e6:39:
0b:97:cc:dd:e1:5e:cf:e8:4f:ab:57:fa:16:15:96:
ae:d5:49:87:24:e7:b0:ea:64:52:28:6d:b3:43:cb:
b9:aa:c6:c8:3f:1e:d8:76:2b:f6:d0:b2:02:0c:de:
6a:2c:11:e2:69:7e:2b:c5:ec:1d:c4:46:6b:ba:d4:
8c:bf:92:e4:80:8b:5c:3b:c1:16:a5:f0:4a:7b:c6:
fe:cd:31:40:9d:1a:a7:26:a2:8a:15:23:57:0c:67:
02:26:5a:28:aa:c2:2e:98:a4:bf:3d:9f:eb:28:cb:
1a:5b:ac:cc:af:47:50:5c:02:47:75:3b:69:4e:ac:
c9:62:b5:2a:72:26:f6:a5:5e:f7:2e:4f:bd:16:8c:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:16:F2:35:6F:6D:AA:B1:0D:AA:94:FE:85:88:DE:85:00:FE:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8e1108f-5351-3920-945a-22b983554b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:01:5a:08:1d:c0:c8:80:10:9c:d5:37:22:37:f9:7e:5d:52:
32:ba:79:02:1d:68:23:2b:ea:57:70:f9:a7:6b:73:4c:1b:d7:
eb:1e:46:55:d9:40:bf:d0:56:90:dd:23:bb:99:fb:1a:48:36:
24:0f:13:37:0c:17:55:cb:eb:c9:71:c6:8d:fa:3b:9c:76:85:
f0:e3:80:53:f5:e5:35:d0:e7:90:a1:92:65:47:63:47:7f:ac:
b5:bc:3a:55:3b:a1:8b:b2:93:ad:18:20:56:5b:87:43:c1:80:
d4:5b:ee:2e:cf:62:bb:85:00:d5:fe:2f:69:5d:37:c8:fc:92:
d8:14:59:c6:6d:74:08:e2:a9:bf:33:36:33:85:a8:85:fc:36:
e5:ef:2a:d1:c8:bc:72:54:c0:3e:3b:15:23:96:8d:3d:e1:0e:
b8:c2:b7:c8:08:99:b6:51:51:0b:24:af:d0:48:23:af:7b:5f:
4f:37:7a:94:71:9c:f1:bd:fe:e9:85:c4:da:3b:cc:69:ed:bb:
f4:b2:ba:90:ce:bc:28:72:e2:d2:ec:16:51:0b:8c:ce:67:df:
ca:b3:76:71:62:35:55:66:2f:41:25:36:23:87:3f:8e:03:87:
f5:2d:ca:17:23:ad:20:5d:08:9b:41:28:0b:25:8a:96:90:aa:
fa:c1:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:39:50 2025 by rpki-client