Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10a0eed8-347b-38ce-8747-42d6a4d2b0d5.roa
File: 10a0eed8-347b-38ce-8747-42d6a4d2b0d5.roa (raw, json)
Hash identifier: xAOA2JPNZVGht8St0T/M81sLmPqDW30LHlcRH+5M/9E=
Subject key identifier: AE:C8:AC:D6:2C:DB:FB:42:60:6F:57:6B:C0:B2:A0:5B:C3:82:07:3C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BF14089F800388F169A52000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10a0eed8-347b-38ce-8747-42d6a4d2b0d5.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Thu 12 Dec 2024 05:00:00 +0000
asID: 15169
IP address blocks: 34.0.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bf:14:08:9f:80:03:88:f1:69:a5:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Dec 12 05:00:00 2024 GMT
Subject: CN=3903e048-6c83-4711-ba14-abf8add776de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:f5:da:9f:f9:92:28:46:db:f8:fc:3b:dd:
52:c9:5b:c2:d8:6e:59:5a:b9:32:12:c8:ea:33:a7:
5e:97:cd:ba:39:9a:69:fc:e2:92:20:5d:31:0b:10:
a1:b3:0b:e4:49:29:70:91:8b:fc:77:f9:ad:c5:4e:
d3:0b:c9:d5:99:9c:f8:4a:3d:44:3e:fa:66:a5:f7:
a6:89:28:f2:1a:71:0d:c2:ae:cd:c8:16:38:c2:cd:
e2:25:ca:f1:d9:a8:44:a7:1d:4f:d4:5c:cd:6f:fa:
2d:98:c9:85:cc:26:f9:7f:8a:f4:de:8b:47:38:8b:
0f:23:08:ed:b0:da:7f:70:a2:08:56:09:b3:19:a8:
44:56:f9:01:a3:26:8b:59:d1:cd:24:5c:c3:f6:3c:
36:44:07:df:af:e4:d7:be:4d:5c:fc:c3:c0:bf:fa:
58:c0:04:d7:13:60:f4:68:eb:9c:e1:4b:56:3f:86:
2f:ef:ac:1f:93:f2:61:62:e5:50:07:a6:12:d4:f2:
b2:08:38:06:e1:ad:2f:34:f7:a9:90:b2:e8:1b:2b:
62:27:a9:14:a8:c8:9f:0e:6c:0f:e1:91:2b:cc:58:
64:24:cd:77:1e:e5:3b:14:01:c8:d7:01:75:b7:6f:
8c:58:d3:e5:94:f1:03:6a:a8:1b:7e:3c:7b:2e:e1:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:AC:D6:2C:DB:FB:42:60:6F:57:6B:C0:B2:A0:5B:C3:82:07:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10a0eed8-347b-38ce-8747-42d6a4d2b0d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:d5:e0:84:02:ae:5c:37:af:3d:99:49:d2:30:05:10:7e:a4:
f9:cf:8f:84:bf:e2:e8:aa:7b:5c:8b:18:e8:38:b1:16:1b:8f:
89:d0:40:22:0c:f0:01:8a:cd:d2:cd:9e:3c:b7:a4:15:4b:c7:
c3:5b:6a:b3:66:44:8e:d4:44:33:9f:43:30:4e:8d:df:a3:cc:
23:e0:9c:6e:6c:c0:ab:6a:07:be:4f:22:6f:ca:2f:82:43:08:
88:18:ec:2b:96:5a:9b:85:80:50:ae:ba:e4:96:4e:c8:13:28:
ac:d4:d7:8f:2a:4b:c1:73:87:d7:36:0f:9e:a4:96:53:33:a1:
d0:f7:85:23:36:4c:8e:a7:19:98:4f:6f:46:d3:da:15:40:7e:
68:c7:17:69:26:1f:c4:6b:98:01:e2:f3:ea:00:c7:34:75:7a:
3a:e2:9f:3a:11:c9:ab:bb:08:26:75:d5:61:9e:81:84:1d:86:
19:5a:c3:22:ad:04:e7:d3:76:d4:1d:53:78:91:46:b2:2c:b0:
f5:fc:6d:5e:28:ac:d4:54:d8:17:5b:b7:3e:9c:b1:fb:7a:52:
cc:62:61:1d:27:1d:99:f8:b1:65:b9:2f:05:09:9d:f6:84:5a:
a2:91:0a:1c:b2:b1:c2:9d:81:38:24:ce:82:5a:73:c0:76:2e:
07:5b:2d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:08:32 2025 by rpki-client