Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/13c6d01d-b60f-3ffc-8fba-4f45f78abcb2.roa
File: 13c6d01d-b60f-3ffc-8fba-4f45f78abcb2.roa (raw, json)
Hash identifier: krjDNxXtMEKfnayFTwG3erl/wrL8DvzfSBqh4+BcOX0=
Subject key identifier: DF:18:B3:1B:6E:EA:1B:A9:04:07:6C:FF:F9:72:3D:BD:AA:FA:C2:49
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6276FC4E7EF27241FC10
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/13c6d01d-b60f-3ffc-8fba-4f45f78abcb2.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.109.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:62:76:fc:4e:7e:f2:72:41:fc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=111b9427-cb72-4989-b0e7-a979bc07d831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:53:e3:d0:92:5d:f0:3a:9a:09:16:d6:66:
8b:fe:7e:16:20:be:ce:af:7e:b2:33:21:1b:c3:2a:
54:78:62:b6:02:a9:a6:fd:57:28:9b:d1:13:ec:45:
1d:43:5a:d0:3d:c4:50:31:46:ca:c6:fb:7e:70:fe:
ed:c0:89:ed:bc:d1:93:c3:5e:c5:84:de:ad:8a:c2:
7d:2c:e0:52:59:e2:56:ab:a4:9e:1d:4b:e4:43:5c:
a4:e4:b8:80:e0:e0:5c:e2:42:74:10:fe:8c:12:42:
ed:48:70:c3:f9:e4:ed:fe:4a:7d:b0:0b:f7:dc:15:
de:af:8a:a0:23:7d:26:f1:63:74:74:5e:09:e2:72:
b4:e8:48:94:70:82:ac:57:d3:db:7c:ea:ad:b2:33:
b7:9c:16:8b:99:e7:30:e8:2a:65:a6:f2:d3:a2:11:
f6:ca:15:be:66:d7:bf:f6:54:ac:14:0b:ea:62:53:
dc:f7:58:dc:40:fd:76:d0:91:5f:c4:cf:1f:9e:99:
39:a5:a5:5e:da:a4:a2:10:63:1a:d0:02:97:f9:f4:
5a:9a:85:db:90:07:3a:fe:21:4f:61:09:71:ff:5a:
1c:7b:be:9b:e1:4c:84:56:5d:d1:71:a6:5b:1b:2f:
51:12:b1:72:62:50:76:0f:5c:e2:cb:7d:1a:66:89:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:18:B3:1B:6E:EA:1B:A9:04:07:6C:FF:F9:72:3D:BD:AA:FA:C2:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/13c6d01d-b60f-3ffc-8fba-4f45f78abcb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.109.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f7:5a:10:f0:3c:d5:14:73:46:f9:54:d4:ca:32:f5:fc:1c:
34:e2:2b:78:39:54:52:32:e5:b4:ad:a5:98:7f:37:06:d3:d7:
44:fa:aa:f5:e7:b7:44:f1:1c:83:51:f0:0e:7c:b6:64:42:9e:
82:c8:6d:0b:dc:09:ff:bd:b7:0d:2c:0d:81:b6:43:d9:4e:81:
7c:94:27:9c:b8:e3:09:5a:72:1f:ca:31:d6:e9:55:0a:df:8f:
ad:9f:c6:08:a1:15:df:4b:45:6a:47:91:a7:2a:d5:33:2b:41:
2e:0b:41:9a:8d:dd:06:1d:80:e9:9f:d4:61:e7:f0:14:a4:ef:
f7:34:3a:5a:c1:4c:44:b5:bb:ba:b5:21:fb:72:a2:ff:ac:17:
59:fa:60:5d:04:fe:04:66:7f:4d:58:cf:59:52:80:98:aa:88:
e3:2e:3e:2d:f4:fa:4c:82:10:61:9f:8e:35:d2:6c:74:43:0f:
73:73:fb:82:08:60:80:c1:52:56:c1:34:09:f9:06:a8:f3:3c:
9d:db:22:43:a3:4d:3c:ac:e4:a3:77:c9:e3:7b:a5:8b:b2:54:
26:45:f0:6a:ab:10:d8:c5:e1:f6:a2:1b:7b:eb:44:9d:aa:11:
63:56:b7:45:50:36:f0:c0:0d:d7:87:1f:ea:5d:7b:c3:d4:f9:
93:55:d9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:06 2025 by rpki-client