Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06bdadb1-6a7e-35d2-8661-a529c784efe4.roa
File: 06bdadb1-6a7e-35d2-8661-a529c784efe4.roa (raw, json)
Hash identifier: cBUn+d0TJWCQaHCFJIexjgg6x+zsT5IQ+NiIzOl0ovc=
Subject key identifier: E5:B6:82:4B:9C:69:27:16:67:A8:31:12:A3:DF:68:EB:5D:6E:63:2C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A70F528B3D7149B94A100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06bdadb1-6a7e-35d2-8661-a529c784efe4.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.137.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:70:f5:28:b3:d7:14:9b:94:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=6077c7dd-9f58-48bb-9dda-5aa0917fd4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:e2:42:32:02:c6:77:b5:33:80:b4:05:9b:
3d:ed:32:f4:c9:9d:95:84:fe:74:39:f9:14:d5:81:
73:4d:98:44:15:91:90:01:85:82:26:2e:f5:65:4f:
ec:8c:08:a6:8d:f7:08:07:20:23:ae:c9:53:02:74:
d2:7b:a3:12:f7:2d:08:98:89:eb:ce:44:7d:99:f6:
fc:cc:be:c1:61:c0:2c:47:8e:9b:62:34:97:d7:fe:
a1:00:f6:6c:e4:b9:73:eb:a2:71:26:89:fe:c4:45:
01:c4:5f:a3:df:10:6d:c2:65:0a:26:ef:64:99:f2:
61:50:7e:59:f9:e8:c2:8e:c3:f3:bd:35:4a:97:28:
b0:b8:83:51:0c:ac:a4:88:7b:31:47:88:5b:8d:21:
fb:4d:59:0e:0a:08:56:31:13:7e:71:97:df:8b:07:
0e:f8:ac:52:ae:ab:5f:80:19:12:dd:f9:17:21:ab:
59:62:f8:c5:d3:95:3b:4f:18:0d:ff:7b:aa:11:71:
e8:de:b5:31:05:c1:91:61:31:7f:ed:a0:51:68:fd:
5b:f4:08:da:e4:1f:62:c2:5a:e2:05:6c:53:85:b4:
d7:bc:8a:57:ea:1f:07:23:a7:8e:fa:29:21:3e:39:
75:83:40:07:bd:8a:10:0a:a5:65:3b:2a:b9:42:a5:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B6:82:4B:9C:69:27:16:67:A8:31:12:A3:DF:68:EB:5D:6E:63:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06bdadb1-6a7e-35d2-8661-a529c784efe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:89:5c:ef:0c:13:f2:4f:82:70:b2:2f:32:1b:e1:e5:ec:c6:
98:6c:38:88:56:b4:26:b6:81:ed:e2:50:46:7f:08:cc:75:41:
64:18:cf:fc:a8:1d:c6:74:4f:ce:f2:92:e8:46:22:74:9c:93:
c6:4c:8e:37:db:12:28:9a:78:a9:6b:d2:f7:06:78:e9:ec:6b:
5d:8d:af:7e:5e:e2:bd:eb:99:b8:4a:d1:46:6f:fe:e1:b3:4e:
87:b2:f5:3b:dc:be:aa:e1:dd:c6:6d:79:de:7b:db:1e:3a:df:
c4:86:df:3f:f3:cb:24:1e:c2:17:3c:eb:fa:ae:1f:e8:57:77:
a7:38:ba:57:4d:0f:6d:cb:0b:8f:2b:23:dc:1a:8b:2a:3f:5a:
bf:b9:53:25:93:44:1e:86:c1:f8:19:e9:54:28:3e:5e:be:eb:
cb:f9:61:83:88:49:7a:b1:d8:d7:0b:f3:a0:14:ed:e1:ec:2c:
61:0d:7a:3f:96:9f:6e:7d:e9:50:36:22:57:c3:00:76:43:05:
2e:09:f0:98:38:f4:56:10:04:2f:5b:2b:c6:a1:43:f9:f3:81:
6e:82:af:94:9c:6e:20:25:55:9d:3c:07:78:97:78:21:86:ad:
2d:3b:48:41:9b:c7:5f:f7:b4:29:ed:c7:3e:0d:f5:5f:7c:2f:
0f:11:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:45 2025 by rpki-client