Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cc36550-0492-3ead-a315-092a5fd00dd1.roa
File: 2cc36550-0492-3ead-a315-092a5fd00dd1.roa (raw, json)
Hash identifier: VyTMzj1VnSOfVQx2uprCBeTF2YhHxPXBJX3ogRsd/Yw=
Subject key identifier: 26:F0:9A:44:5B:F7:BE:56:BF:F6:5C:47:EE:B9:FC:CC:23:0A:07:04
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1DB6375F09B24D84BA98C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cc36550-0492-3ead-a315-092a5fd00dd1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.140.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:b6:37:5f:09:b2:4d:84:ba:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=42e96cb0-31be-4ed8-908b-3a48e53d77df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:79:8a:d9:7d:b2:da:80:00:f2:f6:69:82:99:
58:a5:4e:47:e2:81:91:8b:40:08:d5:10:5f:94:b6:
f2:a7:64:04:43:f0:ca:18:fc:23:23:b8:69:98:b0:
25:f4:58:ce:24:44:5d:b2:3a:93:e7:0a:ce:62:02:
35:9b:b1:32:d5:c2:20:db:12:1f:96:08:eb:ea:c7:
25:85:4e:09:44:d3:88:d7:a2:4f:f6:ec:2c:7f:87:
34:2a:87:d0:3c:8a:87:18:5f:ff:92:aa:26:37:89:
7c:36:f6:1e:0b:28:d4:94:d1:4e:cd:d7:c1:3d:a7:
87:1d:b5:05:87:f7:54:61:4d:2e:2f:54:ac:0a:e7:
76:11:f3:55:ef:7d:a5:a3:77:d7:39:67:55:ec:28:
9b:48:af:25:62:60:8e:a0:89:53:33:be:ad:8b:d4:
94:9e:2e:8d:56:60:83:80:25:12:03:89:da:bd:94:
b0:38:10:23:8b:e3:ea:bf:78:eb:d5:5a:90:65:52:
70:86:b7:87:62:7c:f3:7c:05:fd:78:68:23:e5:32:
2c:1a:b8:80:0b:59:b7:8c:74:58:42:23:a6:c9:2c:
62:52:95:5c:75:36:57:aa:3b:56:66:8a:c0:7d:2f:
8a:46:13:41:d7:1d:f5:e4:35:bd:cb:e0:37:17:ea:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F0:9A:44:5B:F7:BE:56:BF:F6:5C:47:EE:B9:FC:CC:23:0A:07:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cc36550-0492-3ead-a315-092a5fd00dd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:4d:25:1a:51:9a:79:72:1e:38:52:92:b0:b1:1c:85:19:da:
b1:62:57:02:7e:1f:46:bf:07:1c:d8:33:26:be:0e:6a:1c:f0:
00:ad:e5:ac:65:21:28:9e:c5:15:39:47:fa:90:d7:c1:8a:c6:
63:a6:f4:3e:af:ce:56:da:0f:04:01:31:aa:0e:fa:20:7d:19:
2b:29:14:20:23:bb:9f:00:88:52:35:8a:bd:c7:33:9e:88:19:
b6:f9:1f:e1:be:c4:55:cf:8a:c1:bb:6b:b2:01:7e:af:fa:f6:
ce:af:d3:0f:50:92:2a:f4:c1:71:47:51:a2:a6:b8:d9:73:a9:
31:0e:70:dc:87:0e:f6:2a:0c:a3:b2:60:1b:2b:37:69:7a:8d:
e5:70:f6:32:87:86:76:be:57:0d:5e:50:a7:c7:6f:cd:bf:2f:
f0:52:b8:b5:2b:9d:5c:84:68:29:2c:1c:eb:18:03:09:a6:8d:
54:2b:4f:48:02:cb:e2:ab:14:50:a5:a5:da:a5:37:e2:11:3b:
63:62:e7:6b:64:75:c4:5e:63:0d:54:0a:ee:ad:a4:77:8e:38:
e8:99:52:27:e3:9e:ac:5a:08:fb:a5:8e:6f:fd:9c:ec:19:32:
6f:3d:8e:ae:6f:d3:62:65:71:fc:6b:3f:fa:7e:73:df:1a:b7:
64:e0:b4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:18:51 2025 by rpki-client