Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/272d17b8-f64c-36e8-bf9c-8386589cdcd3.roa
File: 272d17b8-f64c-36e8-bf9c-8386589cdcd3.roa (raw, json)
Hash identifier: 2vTACHDyTPP/wv1w/YglO6jy1Sqt/oipggPV4QJzGsM=
Subject key identifier: 4C:44:2F:C2:CF:73:15:C0:5A:B2:DD:88:4A:8B:57:88:9D:12:10:DA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FFFC5FFEF99EAADAD44900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/272d17b8-f64c-36e8-bf9c-8386589cdcd3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.136.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ff:fc:5f:fe:f9:9e:aa:da:d4:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bc124b36-58c2-4525-ab64-0c1d2a60fd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:e8:8a:a0:16:68:a9:97:7e:53:78:28:a8:
2f:a7:3d:f0:9c:dc:48:8d:a0:03:d2:b8:57:8e:f1:
6e:11:4a:ed:40:52:51:cb:ed:a7:5f:be:00:67:77:
55:84:7a:73:90:d5:b0:16:c4:da:2d:d0:14:d8:c1:
f1:7a:00:dc:b4:11:de:19:15:24:19:3e:82:34:33:
0e:d0:25:1e:06:3a:9c:e3:24:09:2d:ae:7a:6d:a2:
12:5b:67:37:b6:f2:a5:e8:eb:98:8d:f6:7c:62:66:
6a:93:4a:d8:ad:dd:cf:3e:77:68:67:50:0b:d3:c5:
f6:42:98:be:1f:ed:67:80:df:c3:45:ec:e1:f0:02:
8a:e0:9f:75:eb:96:60:4d:4e:64:f9:0e:41:d8:c7:
60:ab:73:cd:82:28:90:3c:7d:32:37:1a:5e:b9:f2:
a3:c0:70:6a:3d:1c:5f:76:c8:31:5b:96:d9:6f:be:
c9:b1:92:d3:19:2a:30:ab:50:0f:2e:f0:66:39:dc:
66:ed:5a:39:81:82:8a:74:e3:d3:b6:6b:89:b2:9f:
f5:da:28:b7:e3:f5:d0:e4:8f:58:a9:6f:e6:18:9b:
ed:33:d2:16:e4:a4:59:14:79:e1:a1:d6:38:81:58:
42:ba:0f:0c:3d:62:ff:d9:8e:6a:ac:8c:45:c2:c5:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:44:2F:C2:CF:73:15:C0:5A:B2:DD:88:4A:8B:57:88:9D:12:10:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/272d17b8-f64c-36e8-bf9c-8386589cdcd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:5f:51:9c:b9:3d:b0:21:0e:8c:5c:54:5d:de:ba:ba:2f:7a:
f8:5b:da:ce:24:87:65:8f:17:a2:c4:0a:3e:c5:06:25:75:4c:
85:b4:73:5a:df:d2:a9:86:7c:6a:e8:fe:21:85:9f:3c:47:0d:
09:be:ab:b6:9f:1b:e9:65:37:9c:22:7d:9a:ab:58:7d:c9:bf:
14:37:a7:ec:8f:c2:80:26:5f:48:04:47:45:a2:83:33:2c:24:
9a:9c:6c:14:f2:bb:43:65:6b:af:cb:ab:ee:b0:47:96:d8:85:
35:54:a6:63:60:7e:f1:e6:43:b4:e5:a5:b6:27:7c:3c:60:cd:
c8:25:13:d6:e2:5f:93:1f:af:a2:5e:f5:49:c4:9e:e9:7f:3a:
80:01:70:01:67:3e:ca:74:d7:08:9c:d2:35:88:5e:69:bb:4a:
8d:9b:82:1e:53:df:61:82:3f:66:5b:34:5f:54:f8:32:5b:87:
50:cf:c8:ba:11:2f:e9:c9:db:d3:22:57:2a:57:3a:d1:b3:5c:
95:0d:e0:d4:79:a2:60:c3:fc:a6:67:93:4f:ed:c3:af:35:40:
15:eb:bd:e7:44:b6:66:2d:83:17:03:98:e0:ad:1e:cb:67:4d:
68:a0:40:8e:07:54:d1:e1:cb:a9:88:d5:08:fa:c5:b8:6a:a4:
5e:94:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:10:12 2025 by rpki-client