Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/222c2fd3-8ab7-311e-93fa-a1dfb65782c5.roa
File: 222c2fd3-8ab7-311e-93fa-a1dfb65782c5.roa (raw, json)
Hash identifier: UYA3SV1tziXNGNA/TExTUMXfxLqFBfnadnjhRcvStRM=
Subject key identifier: 2A:81:91:7D:30:92:08:BA:6E:05:EB:8C:AC:34:F1:A0:80:81:15:22
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1E94FE924E97E357A72B60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/222c2fd3-8ab7-311e-93fa-a1dfb65782c5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.123.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1e:94:fe:92:4e:97:e3:57:a7:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9ed7e4ba-7277-4a5b-946d-fe9b4045742b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:0c:ba:c2:54:c8:6c:0d:cd:21:63:18:f1:
8a:6a:21:92:77:21:dc:77:f8:08:ee:f2:3d:1a:10:
77:d2:c7:b0:51:8e:2e:bf:7f:1a:11:1f:e0:c9:bd:
ae:49:3b:72:07:b4:b5:06:57:53:02:58:71:dc:0b:
9c:3f:35:e5:13:82:a7:f9:c6:08:a2:59:9f:a3:c6:
0c:b9:31:df:e6:41:37:bf:9b:e5:28:09:1e:93:1d:
df:3c:4a:94:96:23:f8:4a:ef:a4:b7:34:95:3e:71:
1c:9b:27:d8:a7:b5:9e:40:3c:52:0e:a4:b3:dc:ca:
96:17:29:da:b5:bf:22:2a:3d:e4:91:09:ce:39:85:
d7:f9:07:75:e8:c8:be:94:84:79:ab:58:55:ab:ce:
48:88:f7:8e:85:0f:01:1a:13:13:a4:fd:57:3a:19:
40:67:48:3c:21:94:53:ea:85:be:8d:38:8c:79:b4:
28:d1:2c:c7:f5:98:c8:ae:f8:8d:8b:79:32:25:72:
f7:43:3b:2e:66:67:10:73:a3:87:5a:22:e9:b6:d3:
76:7e:b9:0a:56:38:4f:f2:78:a9:e3:13:07:9b:b6:
14:d1:76:3a:ce:c6:de:92:c5:14:51:27:6b:44:4f:
dc:53:50:c1:ee:f2:f2:11:26:24:fe:66:1c:16:37:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:81:91:7D:30:92:08:BA:6E:05:EB:8C:AC:34:F1:A0:80:81:15:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/222c2fd3-8ab7-311e-93fa-a1dfb65782c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.123.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:01:06:b6:55:98:bc:90:a0:fd:b8:3c:d4:fe:f5:79:58:2c:
35:92:04:6c:20:44:40:22:06:7f:d7:b4:2e:cd:00:00:b8:99:
6f:8f:26:37:83:9c:21:79:d7:0d:03:de:61:0c:29:95:9b:ba:
19:f4:d7:24:39:66:cb:4f:41:cb:12:59:60:65:51:e4:0d:bc:
8d:3e:36:d6:db:51:8d:16:37:9b:d7:87:49:c0:48:51:91:b1:
35:0b:f7:8e:4c:61:b1:e2:70:a9:2e:a3:7f:e8:6b:13:3b:8f:
7d:ee:4f:c3:aa:5d:9a:97:40:10:83:40:f4:37:40:7e:28:e0:
3f:cf:b6:40:a4:c5:ff:0b:ff:12:48:c8:ce:d2:f9:d6:73:c2:
68:e1:0b:43:e9:34:3c:94:14:4d:c8:f6:67:79:55:8c:66:26:
65:fd:59:85:de:72:1e:b0:7a:b9:dd:90:8d:93:e0:62:8a:de:
02:e2:d2:fa:e0:1d:77:83:5f:81:f7:65:ff:c2:fb:f1:94:69:
5c:77:50:bd:e8:d9:93:1d:3c:a9:89:62:8c:c0:b2:c4:87:c0:
df:36:ae:f3:cb:d5:c0:ba:0f:e8:27:03:7f:90:76:2f:f1:06:
3b:9a:03:5e:0f:95:e1:cb:ac:06:10:b8:2f:00:24:3f:3f:5e:
ba:55:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:50 2025 by rpki-client