Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd5ce957-fe96-3002-80b7-92ccaa797f6a.roa
File: fd5ce957-fe96-3002-80b7-92ccaa797f6a.roa (raw, json)
Hash identifier: 5rzlvHBCG9CiHEY5TEHQyY8LHazNAAwu8C7mPE0ktEg=
Subject key identifier: 13:97:64:3B:5E:1B:F6:C4:88:B7:B3:D9:A8:7F:3C:62:9A:0C:A8:60
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A14A4ACC1285C6A4255A740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd5ce957-fe96-3002-80b7-92ccaa797f6a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.109.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:a4:ac:c1:28:5c:6a:42:55:a7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4c3ee86a-cbca-40d4-a45b-c918f8696b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:4d:9d:cd:dd:35:1f:94:29:47:27:4d:aa:
e2:c4:b3:b9:5d:f2:f9:22:ae:34:38:0a:4b:a8:5f:
06:58:bf:78:82:cc:51:a9:64:d9:b2:93:df:7f:51:
c1:f2:d9:3c:86:fc:de:35:de:d6:d8:8f:f4:9b:e0:
b9:e5:9b:7f:02:45:0a:8a:2a:9a:eb:33:ee:c3:b3:
ab:de:9a:37:77:47:28:2f:85:42:b5:57:18:37:8e:
66:f2:e5:c0:7c:cf:d9:be:27:d2:83:85:a4:27:bd:
ea:b3:1b:af:0e:bc:e2:1d:cd:cc:7f:98:2a:db:89:
ae:d2:40:57:f9:89:82:27:d0:c6:fa:65:e0:1b:d6:
4f:69:b2:fa:fa:76:03:88:43:76:42:66:22:40:15:
9c:2c:d6:34:54:19:14:72:c3:78:f8:6d:e0:6a:f2:
0f:b8:52:37:ab:47:4d:b1:26:2f:df:c8:b8:23:9f:
83:08:f7:8d:ec:76:9b:3e:fc:c1:2f:ad:32:72:7a:
d5:04:10:58:d6:5f:ad:ca:43:3c:b8:33:ff:a2:b5:
74:3d:51:37:ee:d5:67:fa:7e:21:31:bd:ee:16:37:
6b:5b:06:7d:b5:3c:f2:5b:85:ca:a3:8f:bf:47:70:
e4:12:f8:1a:a5:4b:43:5c:af:5b:bd:f9:a2:f0:e4:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:97:64:3B:5E:1B:F6:C4:88:B7:B3:D9:A8:7F:3C:62:9A:0C:A8:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd5ce957-fe96-3002-80b7-92ccaa797f6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.109.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:eb:e1:7b:f5:b4:e9:02:2f:05:6e:5d:c2:11:a5:b1:2c:0b:
b4:2a:bc:e9:79:ff:3b:38:a3:a3:b8:23:70:e8:c8:63:af:9b:
a1:77:35:19:41:3b:e4:d4:cc:ed:37:bf:ea:37:7f:fe:bd:b4:
2f:99:68:93:5c:f7:a8:ff:2b:9f:32:48:c3:f7:d9:a0:31:94:
5e:b7:0e:36:54:88:01:c1:65:d3:05:d6:6b:33:7b:1b:f9:48:
d6:7e:2c:33:99:3b:69:54:fb:db:45:15:68:1d:91:fa:65:84:
4c:0e:26:cb:05:92:66:54:f0:9f:8b:c5:34:30:00:0f:48:96:
99:2a:4b:0e:0a:a6:f9:30:5b:5b:8c:09:0a:bd:34:2c:1b:8d:
d0:62:88:2d:ce:a0:05:b2:ff:91:e7:41:ea:cf:af:84:59:85:
7e:34:e7:82:72:81:04:73:92:76:8a:2f:f4:86:3b:81:d9:ff:
9e:81:a6:39:30:39:d6:66:f3:cf:6a:bd:6d:33:0f:f0:b0:9c:
58:b9:ea:42:68:dd:29:fc:0a:18:e8:ea:dd:f0:65:90:98:9f:
fe:18:07:9d:67:da:9a:d8:62:e0:fd:59:fb:ca:b3:65:63:a8:
ba:48:88:db:e7:c2:d6:ab:64:c4:3e:f9:c0:8a:0c:08:30:50:
6c:96:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:09:14 2025 by rpki-client