Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d35b0d4-aed9-3dc5-bb94-1e47715e8aae.roa
File: 1d35b0d4-aed9-3dc5-bb94-1e47715e8aae.roa (raw, json)
Hash identifier: ruu0rzpj5hSEIf7PeSb7me9p9AV8r3Nd9/aeiIcndp8=
Subject key identifier: B4:7B:0A:35:F6:F4:98:7B:4D:E1:D1:B9:E8:D0:32:58:82:1F:33:A1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720AB24CC2F08BFC6D941240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d35b0d4-aed9-3dc5-bb94-1e47715e8aae.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.168.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:b2:4c:c2:f0:8b:fc:6d:94:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=b4a394a9-7a2a-4465-b41d-9d15fdd366f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:71:e8:ec:42:d9:2d:1a:91:0b:f4:74:26:5f:
57:3b:47:df:30:6f:f9:9d:5d:fe:81:cc:c2:c0:ad:
b8:9f:ee:16:2a:e6:b9:0c:1d:ba:e9:9f:37:3e:cd:
8e:28:70:66:9f:01:2a:0e:cb:08:31:b3:5e:1a:2c:
c8:b2:0f:c7:66:9f:b5:85:8f:19:6a:3d:2a:13:a2:
b6:4e:0d:ee:e4:0b:c9:8e:96:47:cb:23:82:49:6c:
05:06:23:7a:48:fe:a8:98:27:8c:be:a9:a6:b7:0f:
c9:ed:d5:6f:32:cb:44:71:b0:ec:80:d2:a6:ca:8b:
92:68:24:0c:51:fe:4c:d4:7b:ab:ca:16:1d:aa:0d:
f1:d6:e3:9f:ba:d5:a3:ea:d1:30:ee:84:0e:1a:c9:
53:a7:ed:2c:39:fc:90:dd:d4:7a:a6:42:bc:3e:e5:
d9:c6:e0:1d:9d:d1:ae:a9:b1:aa:76:77:78:73:b6:
42:3a:43:13:1a:d2:29:c8:7e:04:37:ae:0a:1b:3f:
7e:6e:be:df:8c:41:2c:96:43:9e:38:83:8e:d5:3a:
2a:53:30:1b:eb:f0:0c:84:a9:4a:29:97:01:18:6e:
5b:9a:c3:86:f7:86:b1:8a:6a:9b:5f:7e:2d:0f:69:
57:0d:81:f4:e4:31:f8:89:51:fc:f8:57:8f:a8:15:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7B:0A:35:F6:F4:98:7B:4D:E1:D1:B9:E8:D0:32:58:82:1F:33:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d35b0d4-aed9-3dc5-bb94-1e47715e8aae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.168.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:fa:ec:6c:8a:b7:78:23:9e:8f:ad:aa:a0:c8:6a:44:c0:10:
77:5c:1a:ec:a5:3f:e8:97:ba:e0:52:87:46:dd:4f:84:08:20:
1d:0c:b5:b1:24:bf:78:42:87:fe:e1:d9:bd:6b:ed:f2:b1:72:
dc:26:01:59:60:b9:41:24:1d:fb:8f:59:ec:a7:3c:bf:a0:5c:
08:78:27:2c:4d:27:51:b3:d3:ac:43:32:b9:f4:f7:15:0c:95:
69:d5:1f:a7:2a:15:40:eb:5f:5a:36:f6:0a:3d:8f:9d:d7:49:
02:08:a4:16:67:4e:56:31:83:19:0a:12:99:cc:3b:d7:8f:6c:
3b:fb:c5:40:a6:e3:3d:ca:10:09:ed:b9:65:4e:62:78:b0:73:
6b:35:ee:13:9b:47:32:ef:e1:d3:71:46:aa:0e:d8:44:c4:26:
31:26:cc:52:1d:be:95:f1:5c:e2:2b:7a:c8:df:8f:c0:c7:3d:
cb:55:0e:d6:71:29:65:7b:c8:f7:48:89:b4:ed:1a:8e:10:7c:
3b:14:b6:19:96:65:58:ec:b9:39:6a:ca:27:02:11:70:1a:ef:
0f:f0:91:1c:82:83:e7:37:f5:49:26:41:03:16:65:18:26:1a:
5e:8e:04:2e:6e:5c:8f:e5:c0:ba:fa:8a:e3:1c:09:f7:e8:26:
c0:42:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:55:05 2025 by rpki-client