Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21c19e4e-2b60-30a0-a21d-3f9f6b3b6528.roa
File: 21c19e4e-2b60-30a0-a21d-3f9f6b3b6528.roa (raw, json)
Hash identifier: ui5+asgn4pWK3kjvYlT7GGNZd0dzX85cOZI/7rkIbdY=
Subject key identifier: 92:8F:F4:F5:67:88:02:89:48:A0:D3:F2:53:7B:74:94:51:91:DE:53
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0DADF7821B74A93F16D160
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21c19e4e-2b60-30a0-a21d-3f9f6b3b6528.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.152.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0d:ad:f7:82:1b:74:a9:3f:16:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5417d36c-cd6e-49f0-949f-86fecd735d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:17:a9:b7:9a:8a:c7:3f:95:04:fe:76:15:c4:
0b:97:0b:75:ec:b0:e3:e2:7e:6c:e0:46:f6:7a:b3:
b2:f9:b7:3d:bf:d1:fc:74:60:da:7b:cd:31:30:28:
14:fa:3b:a1:df:6a:74:e4:ed:69:df:47:8e:5e:c9:
e6:49:8c:8e:b1:74:27:19:7b:7c:cc:ff:0d:bc:b7:
0e:fb:e6:7f:40:fb:e6:06:26:3e:5d:40:19:a5:dc:
ee:c9:5d:b0:27:95:97:24:7a:56:cb:9d:30:51:04:
78:21:9e:35:9d:c0:ae:2d:74:90:bb:e6:a1:74:7a:
bb:5a:bc:99:22:e6:c6:14:5b:30:3f:28:f2:eb:f6:
16:35:c0:7e:fc:db:b0:28:09:8c:4f:79:da:76:0e:
5f:72:87:8d:7e:93:ef:8f:72:4e:6d:38:95:de:57:
20:79:9d:ec:86:7f:b3:65:1c:26:7f:87:7a:2e:9f:
06:9a:13:d4:73:8d:0b:74:b7:9c:c2:57:a4:97:c1:
e1:c2:4f:35:97:28:93:a6:08:b3:ac:2e:a6:5d:05:
61:74:60:a6:ba:75:2b:89:88:7f:74:6d:2d:70:82:
48:7f:5e:40:01:56:85:51:7c:e1:84:06:7f:e4:b4:
72:33:6d:cb:6f:e6:0d:e8:43:60:75:34:c5:f7:2d:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8F:F4:F5:67:88:02:89:48:A0:D3:F2:53:7B:74:94:51:91:DE:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21c19e4e-2b60-30a0-a21d-3f9f6b3b6528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:1d:1c:e5:08:ea:34:c0:d7:f5:9f:4d:d3:1f:58:4b:f5:af:
58:92:83:29:d5:e8:62:df:15:91:3c:43:b1:c2:03:55:48:15:
fe:d7:f4:88:7a:be:10:00:d4:4d:22:88:af:6f:01:e8:28:7c:
07:7f:69:12:75:26:68:14:22:c2:ed:d5:a8:ee:c3:b7:d1:d1:
d7:f6:e0:7b:ff:f8:9c:a5:29:69:41:98:5d:64:7c:22:0d:45:
13:15:b6:d9:a0:39:2d:ad:05:bf:1f:54:3c:c3:b7:5e:ab:14:
97:0a:bd:bf:4b:7c:b3:10:2b:22:65:90:b0:7e:32:d5:e4:29:
56:87:aa:1c:ba:d1:05:5e:c7:84:4d:2f:65:62:95:bd:e5:83:
d2:51:15:00:4d:b3:34:49:e5:65:21:07:a8:b1:a7:55:f6:62:
9b:b8:7b:0f:4b:1b:00:9c:7b:ff:6a:ab:1e:d2:29:cd:42:7e:
b4:34:cb:96:77:7c:72:f9:e3:50:87:bb:95:34:83:12:4c:2c:
80:71:f9:36:fa:16:14:60:1e:30:5a:64:5c:e0:b2:8e:e1:96:
6a:8c:8c:9f:25:ae:5e:87:88:0b:be:00:d1:06:66:98:e4:1a:
06:91:65:0f:23:1d:64:c0:2f:58:93:13:bb:d1:70:24:13:79:
0c:e9:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:30:19 2025 by rpki-client