Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11ecf9a9-0d70-3173-9452-38a07f6f45bd.roa
File: 11ecf9a9-0d70-3173-9452-38a07f6f45bd.roa (raw, json)
Hash identifier: UPD7npXumsBp9S0j8Jx+Etz87K8s5BDDmOT2QHLkUhk=
Subject key identifier: BD:C5:76:CF:BD:93:72:5A:9E:FA:8F:4C:3C:00:45:6E:55:2C:9E:2D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A129CB9CD29435E16A4F580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11ecf9a9-0d70-3173-9452-38a07f6f45bd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:9c:b9:cd:29:43:5e:16:a4:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8032c87c-053e-4c0a-9e19-381fd229eebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:79:3a:75:34:86:f0:37:58:15:fc:bf:aa:
0b:aa:99:f3:b3:00:40:aa:f2:f4:4e:45:e0:62:70:
7b:66:9b:98:a5:c1:12:dd:ac:99:85:c7:b8:d0:81:
de:cd:76:cd:17:36:dd:cb:66:ef:58:95:cf:ce:5e:
03:87:ef:29:69:f7:5d:4b:e8:aa:28:13:52:43:41:
c5:6e:03:c0:af:9c:b8:d1:cc:58:a8:49:e3:4c:4a:
a4:99:43:0d:66:aa:eb:4f:72:b3:91:a7:da:55:81:
ae:e9:1e:fd:40:86:4f:08:a3:08:19:45:18:9c:6e:
e0:7b:66:7e:fc:db:68:71:3a:07:5d:b7:59:c1:78:
2b:97:9e:fa:52:c4:33:51:27:cc:a4:c4:db:08:b2:
5d:9e:7b:d4:5e:8b:ba:d3:11:ec:69:5f:d2:47:0f:
68:56:6e:72:6a:23:13:31:06:0b:c1:ac:02:7b:b8:
46:5f:a2:5b:e9:99:66:77:dd:89:78:b3:d7:ba:e5:
5c:26:d0:c7:40:89:7d:dc:dc:85:05:90:c4:61:b0:
b3:b1:2e:80:ff:ac:69:54:48:5e:46:12:c6:69:26:
a1:6b:e2:f3:10:1e:5e:23:81:84:24:1e:fc:e3:56:
b7:47:05:46:79:d7:b1:fe:6a:38:96:d1:08:fb:6b:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C5:76:CF:BD:93:72:5A:9E:FA:8F:4C:3C:00:45:6E:55:2C:9E:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11ecf9a9-0d70-3173-9452-38a07f6f45bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:ec:9c:e4:fe:97:1d:5f:a5:89:66:e7:a1:86:84:2a:69:0c:
8d:07:b5:69:6f:a9:2c:36:8d:eb:a6:50:3f:95:0b:b5:59:67:
e1:5c:4b:b2:71:08:b8:ee:dd:3b:30:02:74:d1:c9:d4:fb:a8:
3c:5a:cc:c8:89:a6:8b:ab:54:00:22:0a:66:e8:ee:79:84:9f:
3e:b5:55:54:6f:a0:6d:0f:8a:89:27:95:b6:45:67:6e:a3:69:
7d:0d:20:92:74:20:92:68:84:39:70:f4:c1:72:0f:2f:39:7b:
ed:4e:db:a4:e8:39:43:27:2e:3f:62:fe:62:46:24:8f:97:8c:
09:34:29:b3:36:a6:27:9d:c0:81:8d:59:ab:cc:10:10:3b:a6:
7f:db:30:69:6e:f0:4c:d8:a0:1b:ee:2b:58:d0:44:ab:c5:7e:
18:9f:dd:dd:e8:dc:cd:0f:6e:24:c0:f3:ec:1c:cc:eb:e8:27:
f0:4f:b7:13:ff:a6:2e:9d:95:ae:32:d3:fd:08:99:6f:42:f6:
c1:ab:bc:75:9d:c0:dd:2a:be:ea:e4:e3:11:cc:6a:2b:03:92:
b5:6b:98:c3:b8:52:90:9c:d8:d0:3e:1b:d9:97:50:cf:b8:2a:
d1:cf:c0:99:94:9c:d7:6f:55:90:fc:1d:95:80:34:21:67:23:
5a:89:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:29 2025 by rpki-client