Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ed7df3e-d6d1-332f-9c3d-031f29c93fa9.roa
File: 1ed7df3e-d6d1-332f-9c3d-031f29c93fa9.roa (raw, json)
Hash identifier: IT7qJSUFF6Cf9B6J03HP38pFACwy1/U9+deKbcR5VGQ=
Subject key identifier: D2:3A:7A:BB:28:0E:B7:0E:5A:31:2C:06:EF:8E:80:EC:A3:8C:7C:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584875F058310233F974E1B66900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ed7df3e-d6d1-332f-9c3d-031f29c93fa9.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 200238
IP address blocks: 34.144.169.12/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:58:31:02:33:f9:74:e1:b6:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=7f5cd412-78c9-492d-99f4-7447272901cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:97:bf:ae:36:5d:c4:ca:06:34:16:70:7a:
2e:b3:90:26:20:48:3b:31:90:ce:a0:34:58:ee:61:
f7:47:25:14:bf:d7:33:31:cd:b1:4c:75:fd:49:96:
7d:8a:d1:39:15:9c:1d:45:70:1b:21:b8:6e:d3:13:
a8:ea:7d:8d:f4:d8:40:c6:35:f0:e9:f4:f5:39:21:
04:aa:a2:b4:66:b8:66:5d:14:08:55:66:c6:41:59:
86:1e:af:72:4b:c5:2f:11:ca:23:67:e1:7b:cb:93:
7a:99:f4:10:09:56:76:02:8e:09:c8:fa:60:4c:6c:
99:65:ad:14:90:d0:c5:b7:28:a7:fe:12:cf:34:11:
57:b0:2a:fe:75:87:cf:87:60:58:f2:40:70:59:f1:
a1:40:0c:0e:3a:02:bc:3c:9b:ea:d0:ef:c0:ff:d0:
b4:45:fe:cc:4b:55:5e:0d:73:a8:53:17:95:65:e0:
2a:7c:da:92:18:0a:dc:4f:44:75:71:9a:7b:44:88:
64:c4:c0:74:d9:e3:d0:f7:23:ea:77:6f:b1:ce:70:
cc:08:75:b4:ec:36:2f:b4:e3:b0:da:18:f3:cd:48:
98:6f:85:7a:50:83:f0:32:1c:f0:bc:b2:96:8e:a9:
97:d8:62:98:4d:8b:ad:d0:17:18:08:41:93:44:27:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3A:7A:BB:28:0E:B7:0E:5A:31:2C:06:EF:8E:80:EC:A3:8C:7C:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ed7df3e-d6d1-332f-9c3d-031f29c93fa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.144.169.12/30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:57:fe:80:c7:44:38:1d:b7:fe:47:c9:07:88:60:29:47:b5:
fb:9f:e0:d4:9f:4e:02:ab:5e:9c:5b:44:a9:ae:7b:54:3e:93:
84:6d:d7:0f:0d:62:3e:bf:7e:b8:51:cd:20:5c:f6:0a:a2:19:
a9:8b:b4:43:f5:69:4a:45:54:78:d8:e4:e2:a8:31:a2:7e:ee:
86:88:ad:f4:d1:10:7f:f3:85:89:ed:d6:60:97:cc:fe:9d:bc:
ab:bb:2f:d5:ca:e2:f9:30:48:35:72:7c:e5:9f:83:bf:80:c8:
2d:a5:3e:df:a4:03:9b:ad:0c:29:63:ea:e6:e3:55:34:cd:85:
ea:55:d6:0a:79:fb:5f:fd:f9:75:59:82:34:f2:e9:6e:fd:f9:
5a:87:5d:9a:17:08:f0:c5:81:e7:18:b1:31:18:2b:63:6d:58:
de:85:b1:51:84:a9:22:bf:ab:fc:b1:03:71:6c:4b:eb:1a:15:
da:17:50:17:e0:4a:84:6d:0d:93:1e:cb:84:64:9d:a9:5d:17:
01:d3:d0:c5:88:cd:1a:55:03:df:ee:94:61:9b:63:08:20:40:
0e:9a:cc:5c:af:94:a6:65:c7:34:68:3b:e5:be:ca:2d:07:0f:
1a:a8:12:eb:b5:a9:b6:d8:61:ba:14:b1:53:a9:12:ab:7b:b8:
b6:97:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:46 2025 by rpki-client