Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25e3e62e-355d-3f92-abbc-36b46643514f.roa
File: 25e3e62e-355d-3f92-abbc-36b46643514f.roa (raw, json)
Hash identifier: AOPy1TtC79bE1iO3VunjKxMQeTZCqV4ocusT8QoAOEg=
Subject key identifier: F9:51:04:64:A4:63:7A:CA:28:86:B0:6A:A6:22:DC:0E:50:18:6D:B0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EB8F6519878CF51BB9A640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25e3e62e-355d-3f92-abbc-36b46643514f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.137.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:8f:65:19:87:8c:f5:1b:b9:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=67c134a4-e310-4e00-b848-63706a28401a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:95:94:f3:2e:82:58:92:53:93:ab:1d:68:
95:3e:51:3f:65:90:e0:e5:ee:7e:8b:66:3a:b4:9f:
00:e7:bf:76:65:e1:d1:e0:99:77:85:45:1c:b2:75:
a5:8a:ef:69:51:c8:91:5c:2c:eb:f0:4b:61:08:5a:
94:4a:b4:2c:0c:bf:cd:34:5f:e6:be:4e:42:b9:b5:
f8:9f:0a:3e:c8:06:ac:83:6a:5c:9c:e9:cd:36:d7:
dc:49:09:28:c0:36:09:94:b0:4b:f3:c3:e9:aa:16:
b1:5b:59:32:02:74:ad:db:2d:0c:3a:f4:95:10:ef:
0b:85:4f:04:97:6b:12:3f:1f:c1:ee:bd:dd:d0:4d:
22:c3:e8:8a:1f:6d:f9:d6:63:a5:8b:1b:19:64:f8:
6b:ab:49:0d:4d:65:a2:55:43:ff:f4:ba:cf:79:57:
04:e2:9f:9e:ae:12:bb:d9:29:75:a9:6a:5f:03:65:
27:1f:ab:6e:14:9a:21:84:37:48:26:7a:ce:5a:a7:
b3:1c:8d:9d:41:7b:c0:c9:84:01:4f:51:f5:4e:da:
65:a4:8d:2b:db:c1:51:07:38:a8:12:60:78:8e:64:
e2:06:bc:cc:b2:a3:d0:1a:85:64:81:46:f3:9c:d6:
f4:03:d8:b4:b5:ec:f5:bd:d9:27:b9:ac:b4:3e:c7:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:51:04:64:A4:63:7A:CA:28:86:B0:6A:A6:22:DC:0E:50:18:6D:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25e3e62e-355d-3f92-abbc-36b46643514f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:33:f2:74:ce:c6:c2:77:44:61:47:ff:87:58:fd:0c:33:27:
37:19:41:c4:23:06:a0:4e:a2:39:a0:a9:f7:8a:2c:65:04:67:
41:3b:06:b4:d5:e9:ec:a3:c3:f9:96:ca:57:c7:a2:b5:a4:f3:
66:8a:82:8a:34:73:b0:db:31:1a:1e:df:29:9e:e9:67:bd:69:
7c:e0:e4:6c:ee:b8:58:f4:98:21:d7:58:8c:d8:b1:20:d5:e0:
d3:c9:46:22:8c:07:63:b1:ae:ea:af:02:e9:cd:7b:65:79:57:
90:ad:e3:89:dd:11:d5:7c:97:7d:a8:f1:66:f3:5c:06:b1:d4:
3a:c2:e7:a3:2a:f6:35:28:63:af:f2:6b:b3:8c:12:e6:4d:b4:
d7:c2:88:b1:78:6e:f0:31:62:9b:6e:55:12:0c:ad:aa:ec:50:
3a:06:d3:11:bf:84:3f:6d:50:45:ad:4b:55:f3:7e:9c:5d:25:
81:0d:7d:16:92:90:24:2b:ce:14:ed:b6:1f:c2:51:a0:6d:ac:
e7:a3:86:52:aa:39:9c:38:dc:5b:24:dc:aa:b4:62:11:69:8a:
ce:9c:08:b7:79:60:f5:5b:58:29:f5:8d:73:bf:a7:00:c3:9c:
9d:57:ad:00:71:12:fe:09:19:fb:81:0a:64:34:76:5f:0d:91:
42:0a:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:14 2025 by rpki-client