Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e2c5de-4be2-37cf-9525-954ffe25a806.roa
File: 28e2c5de-4be2-37cf-9525-954ffe25a806.roa (raw, json)
Hash identifier: zfPBvLWiSj2KYs4FfQGvL7TalUUYB2sr3dQSMaVQHmU=
Subject key identifier: EE:C2:1B:A8:21:EE:C8:27:F9:0B:45:92:86:41:35:7F:5A:3F:F6:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0594E5F74B0C3FC6EE4380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e2c5de-4be2-37cf-9525-954ffe25a806.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.90.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:94:e5:f7:4b:0c:3f:c6:ee:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bbd706de-5ee3-498b-8768-97d1a92ae247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a2:7d:6b:2a:ed:83:84:f4:d9:27:3e:4b:5c:
28:50:8f:ea:a3:75:68:65:f5:c5:b9:ab:cf:04:c0:
ea:86:92:e3:90:a1:b2:b9:b8:18:31:00:e5:fd:57:
08:b2:ef:31:02:eb:93:7c:00:cc:1e:ef:02:e4:ba:
6e:79:38:33:ba:a9:43:58:e8:6d:58:da:54:06:b6:
d0:65:ba:bb:c5:f4:81:27:85:14:bb:e9:3f:9a:87:
42:a9:25:11:61:8f:d4:b2:49:f5:16:4c:59:fe:93:
b5:60:11:c4:4b:6b:5e:ff:7e:16:68:76:ce:3d:15:
1b:a0:cb:2e:2f:5e:42:94:ce:1f:2d:7c:3e:b3:d9:
c9:03:f6:21:fa:67:50:51:be:a1:7c:bb:9d:6f:0e:
2e:39:a1:67:fb:46:e3:ae:fa:05:7a:1f:71:6f:a2:
c2:85:5a:f8:af:de:30:23:7e:03:af:d7:33:77:7f:
dd:ce:b4:a4:de:ed:ca:91:78:86:b2:b5:bb:27:d7:
ef:7c:0e:e9:04:68:26:4a:ea:1e:08:f5:c2:f9:a4:
0d:d5:72:69:91:72:0b:a7:c0:29:f5:bf:ce:62:c5:
cc:8d:ac:b3:15:9d:c8:60:c9:aa:ea:18:65:9d:38:
62:37:9c:42:14:92:11:70:f8:62:ae:11:20:a5:e2:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:1B:A8:21:EE:C8:27:F9:0B:45:92:86:41:35:7F:5A:3F:F6:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e2c5de-4be2-37cf-9525-954ffe25a806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.90.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:b5:64:6a:10:82:16:70:a3:28:fb:ab:b4:3b:65:65:90:7a:
80:59:39:df:2f:ef:af:c3:a2:9d:c6:f3:67:51:01:73:8b:73:
08:e6:5c:1c:7f:24:87:82:10:b7:c7:39:d3:52:e6:1b:c1:a5:
c9:4e:60:70:84:53:51:bb:e5:10:d6:1b:d9:15:fa:e2:62:a6:
17:ca:ab:b3:0b:93:ce:47:b9:23:97:14:f1:06:8d:8a:15:ed:
37:2c:c7:f6:3c:34:c8:73:81:a5:a3:28:48:1e:e0:60:b6:9d:
dc:b5:d6:8c:88:bb:65:6c:a1:17:66:51:12:e3:82:2c:8e:fc:
da:a4:11:c1:2d:5f:c2:49:9d:95:cb:91:bf:eb:04:c9:3e:39:
81:39:0f:7a:1d:12:fe:96:9a:94:8f:d9:1d:a1:89:31:69:d5:
8c:55:5a:96:2e:2e:ff:24:2c:fe:5a:52:3b:5c:df:06:68:d0:
ab:48:b8:60:d8:73:23:9d:07:06:e6:06:ba:43:e9:30:10:cf:
e6:12:b7:60:6e:b2:b8:bf:56:0b:76:05:0d:7b:60:35:ef:cf:
5e:65:cd:9f:63:d7:11:b1:79:e7:78:e9:30:db:a2:c5:a9:2e:
63:9b:8d:7c:d9:90:5e:35:a1:5b:7e:f7:c8:7a:92:64:db:bc:
32:44:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:40:17 2025 by rpki-client