Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2325b164-d9b5-3c13-a3be-ff9daba8690d.roa
File: 2325b164-d9b5-3c13-a3be-ff9daba8690d.roa (raw, json)
Hash identifier: IaIsYVcEu6ZGM7LGAHqObZEdFswnjnZj5iTTpyLE0Oc=
Subject key identifier: D5:FA:85:71:C9:BC:B3:C6:4B:00:FA:81:7A:6C:D2:F6:00:F5:38:76
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B064F3969F5B0E6232DB2C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2325b164-d9b5-3c13-a3be-ff9daba8690d.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.103.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:64:f3:96:9f:5b:0e:62:32:db:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=20154fdf-9bcb-4b1b-927b-ad9fe1ec580b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:e5:3f:47:11:0e:8d:26:47:fe:7a:63:4d:
2d:e1:58:ba:99:93:f4:ee:94:ae:21:4d:6e:2e:03:
dd:3a:f7:3e:30:84:dc:4c:9f:9a:ec:af:fd:ae:23:
a9:96:a1:fe:83:a3:93:a5:11:87:e1:c2:82:31:bd:
05:55:9b:58:1d:ae:3d:d2:fa:60:88:fd:7f:96:50:
93:58:5a:a9:e1:76:c4:d3:e1:85:91:03:b8:45:ff:
ce:3a:d0:51:43:b7:d1:e4:b4:7f:c9:dd:a6:27:3a:
be:fc:87:68:af:a4:4e:87:20:bc:1c:d7:ac:ba:e1:
ba:ee:00:db:74:df:75:dc:a4:82:5f:de:05:7c:ac:
78:9f:a4:b0:62:32:e2:0c:8d:5d:d3:a6:f7:b3:0d:
51:4a:fb:ea:cf:9d:f5:49:dc:d1:74:49:e2:78:c0:
e8:2a:b6:12:bc:f2:36:36:99:ad:7b:28:f0:7d:1f:
12:f0:fe:7f:b9:fc:07:56:ee:cc:db:3d:6d:1a:5d:
9f:80:2f:84:69:14:bb:df:df:2d:dd:cf:74:65:7c:
ab:d7:3f:9b:d7:ea:44:af:25:fb:f3:ce:dc:91:aa:
d2:2e:56:87:59:e0:80:b3:df:3e:46:10:1b:d0:fe:
2e:8d:f3:a2:df:23:46:f3:e9:90:d8:61:90:11:94:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FA:85:71:C9:BC:B3:C6:4B:00:FA:81:7A:6C:D2:F6:00:F5:38:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2325b164-d9b5-3c13-a3be-ff9daba8690d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.103.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:05:70:6e:b8:c6:7a:3d:fc:2f:bc:03:7e:17:c3:f1:03:92:
85:15:cf:a4:67:10:82:4c:02:0b:be:9a:18:19:5a:e9:33:bb:
ff:39:56:57:9d:24:fb:13:c0:d7:8b:92:68:9f:d8:57:5e:2d:
c2:f5:01:85:de:b7:59:61:32:d1:36:10:d0:0f:0b:0f:63:db:
d8:6c:bc:82:d4:1d:78:ea:fa:56:ac:78:e4:2c:16:8d:36:e5:
94:20:ac:2b:09:8d:73:f3:3c:9d:ce:83:56:b4:df:60:ee:27:
49:06:84:fd:f3:21:d7:d3:0c:b5:26:cf:f2:7c:fe:ec:81:c8:
83:34:1a:92:0d:7f:b7:b6:5f:6d:47:00:9b:11:8d:df:dc:93:
2b:6a:04:9a:8d:2f:46:1c:10:5c:dd:2f:55:70:22:ae:56:2f:
b0:7c:5d:ba:55:7b:b5:2e:e6:92:9a:7e:b4:02:e3:0a:49:3b:
d9:61:39:a0:f3:2d:be:4b:95:8f:bd:89:fd:42:0c:14:ab:ab:
db:ba:64:cb:6a:13:0b:82:30:7d:41:8e:07:12:b7:3d:35:3d:
24:e7:ec:da:7e:52:42:bb:1d:44:8b:b7:cd:8e:6b:3d:56:c1:
d9:5a:2c:60:75:61:1f:58:9b:00:00:30:f0:f6:29:68:b7:08:
07:61:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:48:53 2025 by rpki-client