Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c3169a-9745-3d6d-aea9-ff7e0960bdaa.roa
File: 17c3169a-9745-3d6d-aea9-ff7e0960bdaa.roa (raw, json)
Hash identifier: 4iXfv3hXapgRv3ZG5dp+bpxZVGUmAlfS3RK56WGmKDk=
Subject key identifier: 9B:C3:E0:0C:A9:43:EB:41:87:85:3A:36:66:5A:FD:56:35:82:C0:41
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1B555BC63F3AE947D156C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c3169a-9745-3d6d-aea9-ff7e0960bdaa.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.176.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:55:5b:c6:3f:3a:e9:47:d1:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e1c0a08b-69dd-4f5a-9d47-4c909aae6218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:77:98:40:11:29:5f:aa:6e:b4:b0:20:d4:
ec:90:27:8b:48:7a:a2:6b:bb:5e:69:8a:32:ba:3f:
1e:a1:03:67:7f:4f:d4:b0:6f:6c:cd:23:3d:53:e4:
02:a4:a8:74:71:d4:b5:8f:0d:a1:5e:37:af:70:7a:
57:cf:0d:15:5a:7d:e7:b6:64:e2:25:a1:53:e9:97:
46:0c:11:46:08:1a:68:0f:b0:a0:37:e3:8e:52:bd:
0f:0e:39:ee:65:8e:a7:e8:7e:30:a8:8f:3d:19:50:
c2:f5:63:6e:d6:19:b4:18:e4:f0:33:05:fa:19:bc:
18:d9:f7:8c:50:3c:e4:b7:cb:d3:8c:c1:a2:96:47:
90:be:0d:2f:53:cf:d1:4b:61:eb:a4:04:a1:95:e9:
bf:42:bc:cd:60:66:a1:50:26:ea:8d:42:ee:6b:d3:
96:dc:ad:7d:7b:37:27:99:66:62:fc:a4:a6:26:75:
a2:bf:70:c7:44:ac:40:eb:e3:d2:ad:a5:de:82:99:
13:c1:08:e9:86:bc:ec:ee:91:6f:d5:c1:17:4c:a3:
96:00:14:ad:27:8b:16:21:7c:09:5e:39:a5:4b:2f:
5b:b7:dd:2b:f6:47:03:17:a5:a1:79:2c:3d:b5:24:
b6:08:ca:30:6f:55:f8:a5:7a:2c:ed:75:4a:11:29:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:E0:0C:A9:43:EB:41:87:85:3A:36:66:5A:FD:56:35:82:C0:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c3169a-9745-3d6d-aea9-ff7e0960bdaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.176.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:43:5b:c9:5c:e4:d2:3e:06:9c:75:31:b1:5a:af:38:d1:21:
a3:31:b1:60:21:e1:37:7f:7b:ad:83:b7:1c:be:2d:97:8a:8d:
aa:be:3d:5e:fe:68:9b:3e:3f:bf:bf:41:1c:f0:50:55:cb:ad:
03:fc:29:2b:70:1b:f3:c2:42:36:20:af:ca:41:9c:ec:f8:a4:
c6:fb:80:6f:16:46:88:31:f5:24:1c:03:c6:7c:f2:d7:8d:d3:
f6:e1:86:6b:7c:42:19:ac:30:a2:66:63:0f:18:f8:23:7a:8d:
56:47:0e:85:63:3b:52:42:21:51:47:cc:c1:ae:45:2d:e9:be:
2b:11:e9:08:ad:cf:c1:df:ee:de:47:42:9d:b3:05:ca:7f:46:
b2:1f:60:cf:b5:25:f5:33:ba:ea:6d:93:b2:df:fc:69:88:45:
4b:41:eb:a2:db:b3:40:0a:c0:8c:ec:ef:89:b4:3f:01:62:48:
45:d4:ac:bc:65:1c:a6:ea:1e:02:84:5f:6f:bf:c7:aa:d3:65:
b8:9e:22:12:17:14:3e:55:0c:38:8a:b6:4a:f6:76:22:43:c5:
c2:90:f2:2d:d3:10:ae:4d:7c:ec:58:7d:7d:6a:91:2c:5a:d4:
cf:23:29:1e:3b:c2:d6:03:c4:2b:9c:df:77:15:ca:66:4f:6b:
5e:67:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:04 2025 by rpki-client