Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ca63697-1e22-3b08-b98c-f9bf3eba939b.roa
File: 1ca63697-1e22-3b08-b98c-f9bf3eba939b.roa (raw, json)
Hash identifier: nP3MryxQxhGb0PfEcS9wWhZGC1bgrHGiEDDATY5wKW8=
Subject key identifier: 5C:D9:8C:CF:8E:E7:89:68:A3:AB:A4:74:1D:F2:D5:2E:48:62:D5:FA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584016006DFC8A8DF731CC509280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ca63697-1e22-3b08-b98c-f9bf3eba939b.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Mon 03 Mar 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.128.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:00:6d:fc:8a:8d:f7:31:cc:50:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Mar 3 05:00:00 2025 GMT
Subject: CN=61de7f43-cc69-47f6-9dec-b9da6159ff04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:49:4e:eb:f1:ff:20:7f:b2:48:5d:55:98:
4f:d6:5e:1e:c9:ff:d0:93:95:f6:9a:a3:59:bc:35:
ac:5c:ed:18:14:f7:4b:90:c3:5f:ae:cc:6a:9d:c5:
e6:c5:48:88:41:f6:20:bd:f4:44:69:04:86:e8:f2:
ce:05:fb:b2:e0:72:7f:a8:a9:6e:eb:70:e6:c9:d2:
75:ee:d5:29:16:25:11:a7:d2:9c:c0:04:de:57:af:
aa:06:45:58:92:5c:0f:47:37:e0:dc:57:9b:82:68:
15:d5:29:77:4f:28:03:e6:82:ca:32:ef:d6:55:1f:
13:0c:4d:ed:36:93:b8:d6:e7:2d:eb:08:db:05:05:
ea:97:cb:9f:60:34:cb:6f:4d:be:1c:c0:67:43:d8:
9f:1f:20:99:d0:c2:4e:0c:42:da:e5:ec:14:8a:0b:
ac:dc:07:bf:4c:a5:48:41:da:94:e4:ba:55:8c:84:
02:ef:e1:5a:60:72:e5:fd:cf:4e:e4:37:39:3f:20:
14:22:74:34:33:36:5a:4b:f8:52:94:38:7a:16:61:
4a:5e:43:a6:d9:a5:3b:fa:b7:96:be:c5:30:df:7c:
c6:6c:7d:c7:57:ec:7d:97:ee:41:7c:9c:ab:43:35:
c7:1d:91:d4:ce:4c:af:87:02:0d:2d:1b:5d:0b:8b:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:8C:CF:8E:E7:89:68:A3:AB:A4:74:1D:F2:D5:2E:48:62:D5:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ca63697-1e22-3b08-b98c-f9bf3eba939b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.128.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:00:b7:56:07:cd:6e:4e:c9:3f:92:8a:0a:ea:49:a1:b4:7d:
cf:af:83:f7:74:fa:1e:14:77:ca:63:57:23:68:ab:8f:27:12:
07:21:a3:ec:3a:35:7e:7d:0a:6f:88:11:a2:e7:de:46:a8:d0:
39:41:f0:29:47:d8:30:b6:db:eb:a8:1e:eb:f1:e6:3a:62:b4:
66:86:e4:15:4b:7c:5b:80:3a:42:83:c6:96:7f:78:0f:1a:29:
67:0a:cc:a7:3b:ed:42:10:ff:cd:70:24:6f:17:1a:6a:d9:f1:
60:80:0e:7b:53:20:a7:d8:27:01:08:b8:6f:ab:74:f7:4f:f7:
8a:35:6b:fa:f5:c1:22:ca:f9:d4:96:3a:5e:c9:ac:e5:15:c4:
a6:1f:42:c3:53:df:fb:c6:77:d0:62:03:22:72:4f:35:05:30:
0f:e1:5a:d1:a5:e8:74:80:87:cc:45:35:12:51:27:89:03:69:
d0:49:ed:4a:69:f1:71:86:b0:23:95:a5:0d:d4:58:fa:20:88:
79:e1:38:08:4c:26:34:6d:08:48:35:eb:a3:70:2f:57:d1:5f:
f5:b3:a6:0e:50:7a:0d:3e:ee:e6:2f:63:98:37:55:ab:3a:00:
bb:3a:bb:1b:a7:ad:aa:bd:05:47:35:ff:7a:54:00:af:db:22:
5d:0f:b9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:36:49 2025 by rpki-client