Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0badebc7-a98a-31b5-82d6-1ca26b8d1ed2.roa
File: 0badebc7-a98a-31b5-82d6-1ca26b8d1ed2.roa (raw, json)
Hash identifier: OQe/XnxLtkz0JJo8xgN5c72dq4UdnuVRr2VofWL38NU=
Subject key identifier: D0:D6:47:1F:D7:3C:29:8C:73:49:4C:79:54:EC:EB:1B:F5:55:A5:B5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FB6FC7E19B1FDFBC78F130
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0badebc7-a98a-31b5-82d6-1ca26b8d1ed2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.151.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:6f:c7:e1:9b:1f:df:bc:78:f1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a3940552-e521-4f38-84ad-578234194732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:6d:3a:46:cd:b5:15:d0:e6:23:7d:c7:fb:
02:d6:ce:86:b2:57:c0:7e:86:6b:60:5f:81:56:d3:
dd:53:d5:6d:fc:0e:71:57:3b:62:92:10:38:a6:4e:
48:ad:31:cd:83:d7:8d:b8:80:0d:e0:ba:d9:b4:6a:
58:dd:0a:0e:32:fd:ee:a6:ee:de:f4:27:a1:a7:0c:
7c:77:8f:ca:f3:6e:99:fe:62:3c:9b:87:7d:13:82:
ba:7c:95:6c:12:07:1f:fc:24:9d:54:0e:e2:0e:d6:
13:43:66:a0:7b:75:b2:22:28:d9:36:c6:6e:a2:82:
3d:eb:00:ed:a5:99:d2:8e:3e:0a:ae:87:dc:d6:f2:
d5:87:76:56:39:ba:b6:95:01:fc:d9:33:ce:a0:7e:
54:f8:e8:27:3c:ce:ab:b1:09:7a:53:90:a7:14:06:
fb:9e:74:ed:0e:e2:5d:48:77:db:63:11:cd:d4:4d:
7b:1b:1e:17:bc:87:ca:a3:df:42:db:c4:43:2e:17:
7d:53:0f:1e:ee:86:8c:64:ef:41:9b:58:69:2c:df:
8f:29:3a:5a:a9:ef:77:1f:89:c5:e6:ed:05:96:f3:
f8:29:10:41:d9:41:92:4c:16:d9:7f:e9:e4:d8:14:
91:a9:b8:cf:b1:79:7a:e6:26:c8:b9:f2:f7:fa:b1:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:47:1F:D7:3C:29:8C:73:49:4C:79:54:EC:EB:1B:F5:55:A5:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0badebc7-a98a-31b5-82d6-1ca26b8d1ed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.151.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:3b:57:bf:c8:e8:54:98:0d:41:18:74:f0:35:7a:ff:7a:88:
14:ce:23:30:50:35:b8:a2:94:95:6d:2d:a6:a8:b6:23:49:b9:
ec:7f:f1:80:92:56:f1:89:cd:93:68:a2:0a:fb:b9:6f:1b:c5:
ec:5a:2a:0f:65:d4:3d:95:b6:f4:83:7a:38:8d:d8:b2:fe:7b:
fb:17:db:e9:68:cc:d1:d3:fa:5d:3f:dd:e8:62:20:2c:22:b7:
0a:8e:73:88:89:47:18:f0:5c:cf:4a:fc:e8:4f:50:72:27:15:
af:d6:11:11:4c:34:5f:b7:59:6f:e6:62:e1:df:09:0b:74:7c:
a4:b7:5c:6e:33:16:6b:9a:0b:39:b6:55:7d:6b:e3:64:67:b0:
61:56:10:33:d9:b2:38:65:fd:fd:8d:c8:57:3b:b2:62:84:d4:
22:96:84:f4:b9:ae:44:f2:83:2e:3e:de:5c:34:eb:e4:d2:e9:
ca:9a:ed:f0:68:11:94:f7:1f:fe:8e:9d:45:68:28:cb:56:33:
de:d9:01:7c:25:e4:1d:f5:be:35:f0:4e:9f:4e:b8:b3:9e:07:
04:5e:06:88:ff:e2:86:ac:5d:43:b3:91:98:12:22:72:ae:f1:
3f:4a:65:7e:07:89:69:79:7f:59:b5:77:62:4e:6f:a0:2e:a3:
a4:7a:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:20:56 2025 by rpki-client