Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e914b58-d342-32ee-b5d8-bcfcdcfbd65e.roa
File: 1e914b58-d342-32ee-b5d8-bcfcdcfbd65e.roa (raw, json)
Hash identifier: NnZCcPuFUDyDbYaJoBOEU5iktuPCdtPLBGoRrN6cPXs=
Subject key identifier: DA:0C:0F:6E:4F:BD:80:40:3C:C2:C7:E5:63:14:B3:E3:F9:53:26:8E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F76A623DB6553AF223062C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e914b58-d342-32ee-b5d8-bcfcdcfbd65e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.106.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f7:6a:62:3d:b6:55:3a:f2:23:06:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d1275c7d-4fa4-454e-8eca-a57d491d24c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:21:d8:d8:e4:be:4d:cb:83:92:ca:6a:f2:
8d:64:79:0d:42:d4:39:ba:f0:d8:a8:99:fc:75:3a:
aa:f0:15:e0:9c:3e:ff:ff:f7:12:7a:f5:1c:56:91:
94:b3:92:3e:9a:4d:43:c6:98:6a:1e:eb:33:b2:59:
b6:a3:c6:d7:01:05:76:19:e1:26:86:37:dc:fc:4f:
56:33:32:e4:da:2a:65:c7:18:fc:74:a5:41:4b:79:
6c:9e:a5:01:ae:0f:94:fe:89:27:63:9f:48:2b:73:
c7:2f:24:8a:9d:ca:0d:de:e6:40:b0:54:e6:85:bc:
7f:62:2d:cb:e6:eb:dc:31:37:5a:fa:0e:b0:37:e0:
5d:02:ee:bf:c6:44:3c:b9:c4:14:e3:ba:48:a9:81:
f2:9f:07:64:f1:5d:03:cc:51:60:cb:35:31:66:66:
ef:ff:21:eb:5a:19:bf:ed:e2:49:40:7e:0f:0f:f4:
10:6e:78:8c:20:38:2d:63:41:6b:6e:1f:a8:9b:d3:
47:c1:b0:6e:86:cc:23:62:73:9a:af:7e:d5:f9:7e:
b4:80:eb:90:e0:95:ff:0b:6b:a2:63:09:ff:ab:da:
5c:6f:00:f6:0a:c5:b3:01:c0:f4:a8:72:98:cd:95:
6e:3d:36:2d:e6:26:73:ae:88:78:e4:e4:cb:b6:04:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:0F:6E:4F:BD:80:40:3C:C2:C7:E5:63:14:B3:E3:F9:53:26:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e914b58-d342-32ee-b5d8-bcfcdcfbd65e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.106.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:47:79:7f:c1:e9:ea:37:1d:5a:07:de:5b:4d:0a:fe:33:d8:
9f:fc:a2:46:aa:50:ef:98:4e:96:d7:a4:40:80:9d:28:c1:64:
3a:6a:40:0d:d2:f0:85:dd:3d:f0:a0:65:f3:1d:a2:68:6b:ad:
75:df:ae:f9:74:0b:7d:e3:59:ac:fd:1e:bf:47:ad:e8:cc:04:
6a:40:a1:91:0f:9d:5b:bb:29:c9:76:12:4f:7e:cc:71:a6:1f:
12:85:e0:d2:b4:76:a6:38:20:02:3e:63:88:70:04:3c:84:d5:
96:d8:a9:e4:d7:8a:d5:f5:7a:13:cd:f2:5c:35:4d:23:9f:b4:
76:2a:3e:8f:a4:2d:00:4d:f8:8e:1b:fd:70:2c:8a:96:a9:7e:
3e:c3:e1:05:59:74:2a:84:f5:cd:84:a5:90:f1:6b:c1:94:ff:
f5:eb:e7:d0:85:66:aa:32:7d:44:91:70:3f:41:80:25:b3:d6:
83:d0:f6:a8:3c:ed:7c:3e:b3:5f:6e:51:10:75:e9:9d:14:78:
a5:90:1c:ed:d6:68:20:b8:a5:bf:19:21:2f:55:dc:ca:64:d0:
38:37:1b:ff:96:65:1d:4d:91:f9:d5:b7:0b:f7:93:2b:d4:f2:
4b:4c:bf:8f:91:23:32:b8:e8:1f:ed:85:1e:d7:93:8f:df:d1:
79:ef:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:36:30 2025 by rpki-client