Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0da29b9f-8496-3df0-b7a9-9acf92326f9b.roa
File: 0da29b9f-8496-3df0-b7a9-9acf92326f9b.roa (raw, json)
Hash identifier: WtjmrAvt2dtLn2Czs1LCXk91MbLTv+r4KWDBaGBI3MA=
Subject key identifier: 26:27:90:1C:05:E2:2E:06:26:C0:4C:44:DB:2F:8C:29:A7:AB:A0:E2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1675449FC6BB2573D4AFA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0da29b9f-8496-3df0-b7a9-9acf92326f9b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.71.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:75:44:9f:c6:bb:25:73:d4:af:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=068e4f6d-d9a0-46e1-acc2-b925e08b817a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:aa:56:70:66:21:29:80:e1:bd:39:1c:3b:
9b:21:fc:44:54:2d:d7:fb:db:d9:16:8a:a0:63:86:
96:9a:c5:94:79:14:1b:b9:c1:75:57:8b:f8:31:5a:
52:f4:3d:30:f7:d9:b3:1d:be:12:40:ee:3b:3e:fe:
06:ed:3e:76:37:4a:bf:49:de:b0:21:9d:9e:03:7e:
11:ae:7e:36:a8:19:84:08:a5:3f:a2:77:27:21:fa:
15:a2:58:97:ae:42:72:8c:25:0c:ad:a9:ff:d3:c3:
7a:d9:4d:c0:d2:62:5b:4b:2e:54:9f:e7:58:57:3c:
cb:dd:0b:f8:cd:0c:d2:c0:57:d8:19:14:c3:ea:78:
ae:47:54:3c:a5:ac:b4:e1:f3:31:fc:08:41:a8:ad:
56:f5:4e:dd:f5:c3:52:9a:bd:af:c1:fd:2f:d4:f9:
9c:25:bd:a7:da:98:4a:c6:f4:ef:ed:13:dc:c1:1e:
2e:6b:2e:58:d0:a2:3e:46:6c:46:d5:d1:61:7e:9e:
a3:15:1d:da:0a:75:b8:60:3e:cf:99:99:42:ad:ec:
dd:b2:12:f2:f5:de:4a:6a:58:7a:86:9b:0e:60:ae:
0e:4e:2e:f2:d5:63:84:39:13:b2:bb:f2:14:4d:61:
4d:40:5d:a5:32:e5:1a:2d:32:a0:25:1d:72:34:aa:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:27:90:1C:05:E2:2E:06:26:C0:4C:44:DB:2F:8C:29:A7:AB:A0:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0da29b9f-8496-3df0-b7a9-9acf92326f9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.71.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:bd:2c:a7:8f:95:d1:6b:4d:d1:35:a2:6a:a8:bf:49:09:16:
56:95:be:3b:5b:d4:76:b9:bf:81:c5:a1:78:03:3c:a7:ca:93:
ba:69:3f:d0:14:91:32:36:4e:8f:a5:a4:2f:7f:c0:07:cd:3c:
d6:d1:27:44:57:c9:63:b1:11:4e:14:a5:7d:4d:3b:da:ff:d6:
77:03:f3:4c:ac:79:9a:77:06:ab:95:af:60:4a:9e:68:e5:8f:
42:b7:15:6f:22:4f:07:91:a7:1d:af:63:0c:da:28:44:c4:f4:
dd:d6:e8:df:70:c5:44:f3:be:9e:3f:c4:00:16:5f:2c:3a:24:
e4:c3:31:06:7d:84:b4:a5:2c:c6:79:a2:e4:db:bb:95:9f:38:
a6:de:95:a8:4e:69:85:2e:55:a3:a2:aa:57:c4:05:fc:2d:bb:
94:12:a7:ab:0a:0c:5a:d8:ae:f7:88:18:e8:1a:7f:eb:37:e2:
1c:07:d5:2b:d4:f3:37:1d:5e:ac:8d:db:93:ad:f2:37:50:95:
92:32:93:cd:09:33:10:5f:43:06:44:9b:37:8d:aa:1b:6e:af:
3d:e5:c3:c5:3c:ab:4a:f8:95:93:4b:44:96:2c:91:a5:27:59:
98:13:1d:32:fb:d5:8c:44:76:92:7c:ac:3e:d1:10:aa:d8:af:
e3:c7:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:36:14 2025 by rpki-client