Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d4718d1-b1e6-39b3-aa99-b14c25a41e9e.roa
File: 1d4718d1-b1e6-39b3-aa99-b14c25a41e9e.roa (raw, json)
Hash identifier: iXipCFH/W7Kl9QKwgXaH91+Na793LqtS3URVBSpAZdY=
Subject key identifier: 62:9A:61:F6:E5:AC:0F:E4:7A:3B:27:FA:88:A8:A5:B0:1E:6E:42:B9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5253205C39E7408EBB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d4718d1-b1e6-39b3-aa99-b14c25a41e9e.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.145.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:52:53:20:5c:39:e7:40:8e:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=edb4c78d-32fc-49d1-89cb-cf7508c7802e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:34:5e:d9:9f:1b:24:b5:0e:ae:8f:ae:9f:
18:fe:2b:e3:42:49:b6:52:26:23:0b:8a:10:ec:6d:
39:02:82:e0:9d:a5:1b:00:f3:4c:3f:c5:e7:b7:e9:
d9:f3:59:d2:62:71:76:f1:4a:7c:ad:22:b6:3d:80:
5a:fe:21:f5:42:3f:c9:d3:92:be:e4:43:7f:bc:bf:
b3:6b:48:2b:92:56:d6:a9:30:a6:86:68:78:53:34:
10:6c:ab:93:34:f9:eb:78:5d:a2:68:1f:f9:56:a4:
83:5c:a2:fe:98:e6:ac:b6:08:20:6a:f0:43:c9:4d:
ab:3c:70:b2:10:1d:fe:95:dc:1f:00:d3:6b:b5:f5:
db:e7:2b:e4:14:c9:37:ba:26:75:c8:0e:91:ae:29:
a0:ac:29:72:fd:e6:9f:8a:b8:84:47:cf:46:e9:9a:
c8:c2:2c:fc:10:c1:00:38:d3:3f:53:1a:bd:89:bb:
cb:14:1f:d3:a5:67:c2:ae:ea:b2:a7:21:d6:3a:09:
64:f3:e7:d1:14:26:4f:19:fa:9b:0d:43:cf:d5:a1:
23:cb:78:85:3e:44:3f:9e:02:d7:24:23:d0:bb:ca:
fc:f5:2d:71:c0:0c:f6:70:56:fe:1d:5c:79:5b:cc:
f8:f0:cf:69:ee:8b:89:2f:a9:b3:81:01:c5:9e:8c:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:61:F6:E5:AC:0F:E4:7A:3B:27:FA:88:A8:A5:B0:1E:6E:42:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d4718d1-b1e6-39b3-aa99-b14c25a41e9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:5c:60:c3:9b:6f:23:92:41:13:b8:50:28:26:a3:35:48:32:
b4:fd:28:59:9c:af:c8:31:2f:0b:fa:df:26:60:1c:24:48:2a:
5c:87:fd:4a:24:95:5c:05:38:f1:eb:1b:a3:aa:73:4f:5b:ff:
ec:36:ee:d4:a9:af:34:6f:38:0e:84:28:b1:58:db:30:4d:79:
ca:96:46:fd:53:5d:a3:12:52:0e:64:2b:8d:e4:9d:79:7e:54:
00:8a:eb:c4:8e:c9:96:88:72:ee:83:50:97:aa:4e:c3:a3:12:
e8:1a:b0:52:a6:db:67:a0:9c:7c:03:ae:20:66:32:4b:16:2a:
26:fa:d6:e8:e8:f0:6b:9f:ae:fc:52:0e:97:d6:e2:26:57:de:
c0:75:e3:4b:c8:12:66:65:86:8c:05:fb:cc:df:56:23:95:61:
8f:3a:42:69:64:4f:e4:12:eb:86:94:84:86:a3:37:96:5d:5e:
59:46:09:3c:ba:fa:4c:b9:ca:d9:ed:47:5b:f4:85:c1:84:66:
17:68:08:fb:3d:4c:b2:21:bb:a3:f7:58:75:40:6f:cf:cf:f0:
ec:71:e7:ca:f8:7f:23:eb:85:af:20:45:f8:4d:97:48:40:41:
2c:8f:26:ed:58:06:0c:75:73:4e:5f:65:9a:2a:3d:41:bc:f3:
bf:06:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:47 2025 by rpki-client