Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffcbcd46-1143-3f84-90dc-4b374005619d.roa
File: ffcbcd46-1143-3f84-90dc-4b374005619d.roa (raw, json)
Hash identifier: sNO2BMPapBXxXyEgIEF+5lbMQhl/kUcvk8YW0GPONvw=
Subject key identifier: 3D:9E:DF:FC:EA:8F:83:CA:91:C4:E9:F9:81:41:C2:E6:60:6F:64:1C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1D91D35F594CA40BBB13C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffcbcd46-1143-3f84-90dc-4b374005619d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.103.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:91:d3:5f:59:4c:a4:0b:bb:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=86445fc9-0430-4535-92d8-94cecde1a2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:b7:f8:9d:62:db:91:b5:01:05:ab:07:b1:
46:38:c7:63:81:83:35:03:92:04:80:06:05:23:93:
8d:4c:7d:b9:09:18:7e:34:52:26:29:9a:df:52:fe:
68:73:6a:a7:49:eb:8e:f0:2f:18:d0:53:01:1f:4c:
10:01:94:87:b9:91:40:ff:03:b1:e5:06:7a:47:e3:
d6:ab:3b:2a:2a:6a:34:89:86:b7:5a:5d:02:c3:96:
1c:c7:35:b6:67:04:64:d7:ee:c7:c6:87:b7:ee:82:
63:58:77:df:62:1f:99:8e:71:05:70:53:cf:36:f1:
52:1b:42:8f:f5:6b:e4:f0:ac:3e:d4:30:d7:8c:96:
cb:d6:67:8d:84:ec:b6:b5:4a:0f:8b:c1:27:73:c7:
5d:44:03:a0:84:b6:30:b4:3a:26:9f:d4:f3:c3:1d:
fe:0e:c6:46:6a:ab:f1:fc:7b:21:4e:0d:d7:4b:dd:
98:2b:1c:8a:34:bb:ac:eb:17:7d:1d:48:44:62:c1:
22:46:e2:53:07:2d:56:8e:dc:79:fb:d5:50:66:10:
f8:1d:51:54:3c:d6:bb:f1:e4:52:f6:e9:de:1e:7e:
e1:64:ef:ec:ce:5b:34:15:c8:28:05:a3:0c:14:28:
ed:c4:26:bf:50:fa:83:68:7e:e0:9f:09:77:a4:05:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9E:DF:FC:EA:8F:83:CA:91:C4:E9:F9:81:41:C2:E6:60:6F:64:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffcbcd46-1143-3f84-90dc-4b374005619d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.103.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:24:e5:d3:14:fd:93:3d:ee:54:a9:0b:d3:e4:78:02:77:9b:
b7:c2:1d:f5:aa:0c:5c:00:5e:17:7a:9b:7d:14:fd:30:64:93:
b5:0a:5a:8f:8f:3b:fa:12:cd:83:a6:b7:1c:cb:67:91:c2:23:
fc:fc:f4:cd:cf:51:c0:1d:9e:e4:fd:a3:ce:f5:10:b3:e6:bf:
aa:87:83:86:91:1e:41:7d:e0:4f:df:04:ac:f1:36:be:21:ed:
2a:eb:d9:28:31:ea:97:c5:a4:34:a9:25:16:c2:a1:1d:b9:6b:
e1:e1:cf:6d:31:7f:92:5a:ad:ac:f0:18:73:5b:dc:0f:2d:56:
5e:ce:bd:d1:31:2d:5f:a3:cf:a0:79:8c:d9:ef:64:34:06:26:
21:57:47:3b:eb:13:e0:f1:12:d9:ad:15:fd:be:be:a8:6f:36:
08:f4:2e:a5:5f:65:27:15:9f:43:87:1c:d5:5c:6f:53:36:67:
f8:d4:57:a4:78:14:94:43:63:22:bb:66:35:df:72:b3:78:7d:
9d:5b:6b:df:7b:98:78:44:04:75:3d:52:90:a3:a6:1c:00:fc:
46:42:d3:68:97:02:e5:7c:71:cc:03:aa:38:de:24:9d:59:07:
b6:83:00:d2:59:36:86:d7:df:b1:95:7a:e1:87:08:22:11:07:
48:a8:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:52 2025 by rpki-client