Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1dfe4b29-dff9-3023-a0f7-3a4fe0f5cd16.roa
File: 1dfe4b29-dff9-3023-a0f7-3a4fe0f5cd16.roa (raw, json)
Hash identifier: 3WRKhe9Cr6PLf8rXb+JAfcwcse5j7q6rsfVgfZ6vsBk=
Subject key identifier: A0:1D:3D:F3:42:17:44:DA:9E:55:2D:40:F3:45:66:6A:2D:13:52:38
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A185C6B009B3FC90B453D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1dfe4b29-dff9-3023-a0f7-3a4fe0f5cd16.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.104.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:5c:6b:00:9b:3f:c9:0b:45:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ac44f3f0-a70d-49c3-8d17-e2852244c761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:4d:41:65:a5:f1:d0:87:43:0d:96:df:06:
21:30:10:9a:35:c6:7a:b2:fc:f8:e6:15:49:b9:99:
b8:bc:4b:5c:15:18:e0:4d:8d:24:ac:32:5a:1a:f9:
e9:83:c0:d1:c8:16:38:5a:65:74:9b:15:d8:fe:5b:
ff:e6:0f:9e:c3:17:d7:6d:49:76:ec:9a:be:7b:c2:
ff:c4:ff:14:ed:b6:03:72:f9:9f:40:e5:3a:c5:7c:
cf:9a:49:dd:cc:73:83:7e:bf:5a:aa:75:f8:0b:e5:
fe:97:43:9b:69:66:86:de:d9:4f:f9:24:1d:bf:94:
17:fd:98:7b:f7:97:04:9e:48:07:fe:5d:82:4c:8a:
56:a4:bb:cc:09:3b:db:aa:85:9e:e7:79:da:fd:a8:
0b:c0:56:de:43:ba:4a:3f:9f:2f:73:7d:38:8c:68:
18:cb:15:89:ad:c8:c7:57:df:61:9e:cb:60:a9:49:
99:cf:ef:81:0d:0d:79:a3:67:85:18:3b:42:e3:30:
b0:19:ce:0a:40:0f:02:49:f0:6d:4e:84:a6:5e:77:
5f:b7:12:9a:d6:b4:bb:c5:e8:69:1d:ed:a0:29:d5:
54:20:88:7c:3a:78:d1:d1:88:eb:b1:67:fd:9d:58:
41:0b:b2:f3:c5:ca:a6:8b:20:ae:be:10:fb:40:0b:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1D:3D:F3:42:17:44:DA:9E:55:2D:40:F3:45:66:6A:2D:13:52:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1dfe4b29-dff9-3023-a0f7-3a4fe0f5cd16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:3e:5e:e1:be:8b:fe:c0:8a:af:45:67:66:ac:51:1d:19:7a:
d6:94:c2:58:3f:b1:3d:64:38:17:3e:5d:bb:ed:12:d8:46:ce:
7d:13:27:d6:ec:01:ee:cc:9d:fb:d7:38:47:ca:08:82:b9:fd:
11:61:ab:c0:2e:bf:51:8b:0c:33:ae:1a:e3:c8:b0:c6:73:c0:
e8:01:a2:37:40:d7:92:4d:c9:79:07:c8:91:5a:18:8c:6d:1b:
e0:15:77:90:f7:a7:92:7f:59:e2:52:9c:1b:ef:89:06:be:9a:
7a:03:ec:f1:f2:3a:aa:6a:25:1c:9d:c5:b6:74:3d:31:d3:a8:
6a:a0:dd:7a:a1:8b:ce:20:05:8b:0c:a6:22:b3:94:4f:90:68:
be:bb:0a:da:c4:86:11:d6:a9:68:c1:ea:ca:0f:69:ba:01:94:
b3:ae:8f:fe:f3:8d:14:73:ce:0e:c2:da:0e:a0:7e:d4:7f:91:
c5:d4:44:36:f1:e2:f6:61:51:ed:7f:7b:8a:c9:db:0a:e6:de:
c8:fd:7c:33:4d:75:49:b1:ac:26:1e:8b:8a:43:a1:1b:cb:98:
b8:a1:d9:ed:b7:ab:cb:7e:24:f0:25:22:71:11:c8:1c:e8:4b:
a6:cc:0a:6a:c3:f8:4f:56:92:62:a1:92:20:19:e2:bb:de:2b:
90:6e:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:24:52 2025 by rpki-client