Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25e71e40-2f5f-33f9-a637-4e50178eb7f8.roa
File: 25e71e40-2f5f-33f9-a637-4e50178eb7f8.roa (raw, json)
Hash identifier: 3BR1kKaculf9ws7bDZ8fWTTQptTCLigI0GhdjQ9B/aU=
Subject key identifier: D5:99:13:8F:BF:25:5F:7C:26:75:12:A2:EB:D4:6A:5D:02:D0:82:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F403C018351117C04D2910
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25e71e40-2f5f-33f9-a637-4e50178eb7f8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.108.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:03:c0:18:35:11:17:c0:4d:29:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0a377131-2933-4b18-a671-73673d4141ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:53:40:78:e0:fd:a4:e3:68:b9:8f:3b:a9:19:
93:3e:13:c0:ef:30:ba:c0:d2:6c:2e:be:5c:0b:ff:
2c:f5:ad:76:03:f2:6f:14:31:05:ec:ca:ee:32:ff:
d0:ee:9d:5e:75:7e:97:e2:9a:37:9e:a6:92:ef:19:
30:f6:95:94:74:a4:cb:73:81:b7:16:0b:ac:45:70:
6e:1c:49:f3:69:89:b2:f5:06:59:bf:13:fb:de:65:
e4:3b:9a:12:08:e0:72:e8:4d:f6:4c:60:5a:bb:66:
c4:47:6f:97:51:55:f6:61:d0:61:e8:e0:3a:e1:76:
56:fe:75:2c:08:bc:5c:0f:8f:23:f9:ec:1c:e2:dd:
9f:1e:a9:b9:a5:3d:81:ed:c6:3e:27:73:97:56:0a:
4c:ea:cd:6e:81:18:c6:b3:99:bd:c4:71:0b:eb:67:
1a:e8:90:b8:8b:57:ba:68:81:45:a5:27:54:b0:21:
76:2d:05:b2:6a:14:3f:dc:0a:a9:66:eb:b5:32:af:
fd:36:17:67:6a:e8:f8:14:ac:7e:bc:da:2e:21:4f:
b7:30:a8:11:e9:c8:3d:21:34:59:55:a4:7f:bf:7b:
61:fa:42:99:71:94:28:24:99:d2:99:a0:8c:8a:e0:
53:07:1a:30:09:a2:76:7d:10:68:03:f5:b9:1a:00:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:13:8F:BF:25:5F:7C:26:75:12:A2:EB:D4:6A:5D:02:D0:82:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25e71e40-2f5f-33f9-a637-4e50178eb7f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.108.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:8e:3c:ed:4b:c1:60:dc:f5:f3:46:52:0e:f7:f7:e5:e2:d5:
35:1e:70:5d:53:fd:a2:40:15:55:9f:b7:28:67:06:dd:c2:6b:
98:42:27:16:b8:5e:75:6b:8f:5e:8c:4d:a1:40:59:71:4a:81:
06:89:18:b6:a1:28:8d:9b:7f:49:5d:93:b6:63:fd:ee:4e:5f:
db:5c:52:3f:f0:ce:31:30:93:69:db:b1:20:d6:12:b9:6c:e3:
c0:9b:82:ed:3b:93:c4:58:d5:0b:a0:ce:64:22:00:12:88:c2:
96:07:ea:1c:23:e3:a4:49:3e:5d:4c:7c:45:0c:c7:77:70:a9:
1f:bb:b4:9f:98:5d:71:76:54:00:2a:57:b1:6e:fe:ff:2b:b9:
90:6c:b0:c9:50:1e:39:0f:18:19:a7:d7:36:5e:c1:a0:cc:69:
fd:25:08:ba:e3:ec:d1:a4:5e:af:21:f9:51:50:27:f7:18:ab:
9d:1e:1e:68:2b:a8:67:ba:d7:e4:96:7c:64:f2:26:5b:83:c6:
58:d4:5b:92:83:b0:66:7c:28:e7:8a:e9:75:3a:06:7f:b6:cb:
95:37:1e:f0:9b:94:9f:e9:95:bd:27:5c:5c:2e:04:99:0a:11:
43:d2:4d:cf:55:9a:96:08:2c:be:dd:1d:82:cd:83:3e:ae:7d:
9d:dc:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:04 2025 by rpki-client