Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/242386b2-a0a3-35b6-a368-368760dc4f6d.roa
File: 242386b2-a0a3-35b6-a368-368760dc4f6d.roa (raw, json)
Hash identifier: aRy3yeY1rRZbH0A7txJHPKZ1Ycqg0PFN0HO/e/FinkU=
Subject key identifier: F3:4B:2D:4D:8D:83:4D:2E:F2:26:83:D5:09:8C:8F:03:40:3B:C5:4A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BF143C70B76562981364BE40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/242386b2-a0a3-35b6-a368-368760dc4f6d.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Thu 12 Dec 2024 05:00:00 +0000
asID: 15169
IP address blocks: 34.0.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bf:14:3c:70:b7:65:62:98:13:64:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Dec 12 05:00:00 2024 GMT
Subject: CN=2bcd7be9-d333-4b27-b413-b973ad7320a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:cb:be:d8:9c:fc:98:cc:54:8e:46:42:d3:
5a:21:00:21:4a:44:80:ea:2d:4a:29:bc:d6:40:2c:
99:66:bb:48:21:37:e2:5a:94:16:ff:4b:ad:26:1f:
c9:be:b3:53:fe:84:d9:ef:f3:28:c0:fe:fe:3f:6f:
d3:fe:57:a6:45:da:8b:03:d0:ae:8b:f3:5e:a8:96:
ab:85:c2:13:cf:84:9f:99:ae:a6:a8:e7:00:fa:c8:
76:8e:3d:bb:54:71:15:3f:0a:dd:eb:7d:40:79:be:
33:78:e9:aa:bd:e5:1a:56:88:7d:02:c4:a3:8a:ef:
0b:7c:2c:27:8c:df:08:10:94:5b:f7:b0:85:e1:3d:
e1:7a:10:b6:2f:1e:ca:9a:56:98:39:6f:41:cb:70:
02:72:ea:98:48:c5:ea:e3:87:4f:cc:1e:bd:45:d8:
90:e3:bd:ad:91:3f:8d:e9:8c:97:06:5d:dd:90:df:
32:58:a7:22:1c:30:6b:db:c5:e9:44:f3:fd:01:0e:
2a:f0:42:35:cc:40:30:e5:2d:45:ad:2d:d6:56:4c:
a5:9c:ec:7d:1a:71:c4:fb:8a:c8:38:cb:3f:28:7c:
95:3a:15:c5:84:cf:4d:2e:d7:bf:3e:e5:b7:a2:ba:
64:5d:35:e3:4a:d3:e1:37:e0:f6:2f:6d:9a:5e:75:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4B:2D:4D:8D:83:4D:2E:F2:26:83:D5:09:8C:8F:03:40:3B:C5:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/242386b2-a0a3-35b6-a368-368760dc4f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:b5:f5:c7:c7:a9:f7:21:0c:86:5c:9d:8f:0b:2a:92:c4:fe:
30:24:d9:b0:dc:69:c4:c0:73:6f:4b:a4:56:d7:cb:df:69:0d:
cf:9e:4d:09:d5:20:13:c4:36:56:b7:53:aa:e8:7a:40:c6:ea:
39:53:f5:77:91:ed:ad:6c:18:ac:72:3d:f6:9c:c2:9c:41:2f:
fc:6a:3b:2a:f8:f6:f4:28:9d:57:38:66:c2:8a:a0:da:57:cf:
12:d5:d0:f1:11:a1:06:89:bc:84:b1:02:c2:38:c1:fe:c4:7d:
50:81:2f:f0:7a:a5:2c:bf:90:6e:1d:ec:e9:34:26:c0:9c:db:
a9:23:4a:23:bc:c1:b2:36:c7:63:3a:af:78:26:6d:0b:97:b3:
ba:38:71:6f:81:36:3f:44:54:68:72:eb:6a:3a:f6:10:32:80:
42:8d:2a:d1:f4:97:b9:77:a4:da:81:4d:11:74:b3:ce:e7:7a:
b8:4b:72:45:db:f9:da:52:ab:df:1b:df:31:48:00:db:a3:f9:
07:3c:44:be:97:07:73:ab:99:3c:aa:ae:57:26:9d:27:bc:0c:
45:04:b1:ca:1e:3c:0b:b5:f0:cc:5b:dd:77:f7:7f:5e:5c:0a:
f2:7e:ed:13:3b:70:87:74:8f:de:39:69:12:06:c7:04:f1:49:
2b:0c:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:05 2025 by rpki-client