Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d72d34c-0077-3d29-9f49-0983dbcb3bdf.roa
File: 1d72d34c-0077-3d29-9f49-0983dbcb3bdf.roa (raw, json)
Hash identifier: rUegIirohfI1J3TQvrx9RKFJD8KWwiXH+2yb8krr6tk=
Subject key identifier: 2B:C6:2C:6D:67:AD:FA:75:FC:05:A0:2B:74:90:9D:C9:2C:FF:DB:2A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE85CFEEB871A1ADD38841C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d72d34c-0077-3d29-9f49-0983dbcb3bdf.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Sun 29 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.154.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:85:cf:ee:b8:71:a1:ad:d3:88:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Sep 29 04:00:00 2024 GMT
Subject: CN=19b093eb-7d78-4591-a5ef-a636f1d5f118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:dc:7e:9b:a8:1d:8d:f7:31:cc:0b:4c:dc:
21:4b:59:29:fb:f8:70:71:8a:57:a0:8d:11:8a:32:
00:50:a3:64:7e:5f:f7:28:4f:c7:61:bd:f3:ca:8d:
ea:b9:91:ee:9a:11:b8:0f:5f:81:4f:8a:3e:a8:31:
f7:28:d2:d3:98:1e:a7:98:cc:b6:95:6a:17:a3:b8:
58:d0:d7:83:f3:08:a9:d2:69:86:84:65:6c:a1:14:
7c:e9:3a:fc:f3:eb:5b:30:37:d0:8d:7b:bb:f1:3b:
f2:03:30:e0:81:2d:8d:8d:38:b6:eb:2d:fb:03:ac:
62:2b:b7:b6:03:5d:f8:fa:06:46:cc:0e:be:b2:fd:
72:14:49:09:2d:6b:34:55:0e:80:78:a1:30:40:99:
1d:cf:cc:da:4d:84:1c:33:4d:ca:7c:0f:fc:f3:f0:
7e:35:50:f8:be:69:07:2e:a5:d3:4e:6f:80:b3:08:
45:91:39:ec:4f:89:48:fe:90:c4:c4:56:80:2b:a8:
25:87:eb:1c:39:87:1e:1b:d1:42:a2:8c:c1:89:cb:
35:d4:43:f5:1d:83:30:2d:3c:63:87:64:5b:78:c5:
8d:1b:9c:d4:9e:89:e2:92:07:a5:60:7a:11:67:58:
4a:84:fd:37:b4:cc:16:ff:29:3c:4b:db:a4:d0:8a:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C6:2C:6D:67:AD:FA:75:FC:05:A0:2B:74:90:9D:C9:2C:FF:DB:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d72d34c-0077-3d29-9f49-0983dbcb3bdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:52:26:3e:b3:1d:bb:f8:6c:ed:cc:ec:bd:b7:53:f2:d6:96:
19:e1:32:c2:4b:1e:e4:3d:ac:b4:f6:01:7d:c1:a3:8a:bb:23:
bf:d4:d3:9c:7e:4b:ce:11:39:1d:29:4e:89:aa:72:ed:69:91:
b6:d4:00:65:1e:b2:94:13:3e:2b:af:53:47:53:7b:3b:ae:f7:
29:0b:6c:0a:df:ab:93:0d:1a:21:8b:a6:07:55:ed:10:38:cf:
1d:22:75:c3:9a:64:ac:f3:a3:d7:c2:d6:54:4a:42:9c:80:11:
e1:df:07:77:18:69:27:25:68:80:1f:8b:49:c3:6d:2b:96:ff:
ae:30:f0:68:e0:d8:2b:33:0c:1c:a3:b5:ba:1e:a1:1b:19:24:
2c:84:83:e6:38:e8:d8:d8:8f:54:c5:f4:9d:7e:36:3c:c5:da:
69:2f:51:9a:4f:07:54:13:ab:f8:b9:aa:46:51:02:bb:92:a0:
3c:16:c4:d5:8a:39:e5:dd:47:8f:37:30:64:b7:bb:44:58:f7:
7d:25:15:69:01:44:d0:c1:02:3b:b4:6e:46:1b:a5:2d:da:28:
6f:a0:24:7e:29:c7:6f:01:e8:2b:fb:14:74:1e:13:bb:fd:5d:
d7:27:b2:75:08:49:45:42:ab:ab:fb:ad:cd:11:ba:c0:d4:18:
ec:df:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:43:20 2025 by rpki-client