Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fd0ed70-da22-310b-850b-425b9d66becc.roa
File: 2fd0ed70-da22-310b-850b-425b9d66becc.roa (raw, json)
Hash identifier: HoX7RWYdekQHRgw8nAngyhY6lDDFNeKaTtXowMZRnpM=
Subject key identifier: 32:8B:EF:C9:2C:56:96:D6:8B:C1:12:33:85:E6:E1:4C:7A:85:FD:5F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0219E897659B536C019480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fd0ed70-da22-310b-850b-425b9d66becc.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.143.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:02:19:e8:97:65:9b:53:6c:01:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8557b5a3-1f7b-4b9e-b574-60e8a918b5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:3e:3c:dc:fb:1a:06:64:f2:8c:d7:a4:62:
b1:1d:2a:1c:95:da:64:39:92:cc:a9:47:73:ab:d4:
97:aa:20:2d:bd:8e:8a:64:55:68:32:14:7a:0f:33:
bd:e2:36:1a:45:8d:d5:c0:49:ee:93:6b:29:3e:56:
a9:c4:d4:db:8e:0d:85:85:cb:f1:cd:f2:05:ba:24:
2f:b8:a5:df:d9:39:f1:e3:06:ef:d0:70:fc:e1:d8:
cf:5b:64:80:96:e5:59:b3:0e:0d:64:ef:70:0f:4e:
31:8a:bc:0d:0a:c2:15:c3:30:76:bb:fe:fe:fb:aa:
18:7b:c2:a1:35:81:f2:9b:f1:7c:0d:30:c2:f5:5d:
b7:30:a8:62:dc:d0:e3:d8:9e:e0:d4:98:c2:8c:7f:
ed:55:7b:ea:b7:9d:8e:c7:44:13:a4:76:6c:34:88:
52:c5:9d:15:6b:68:69:d0:2a:53:5b:ec:e0:11:6a:
34:00:c9:77:c1:cc:85:e5:36:d1:65:6c:1d:c5:57:
eb:07:b3:f5:96:aa:39:c9:2a:50:60:1a:14:46:f6:
ba:c3:85:8e:e5:30:26:79:e1:0b:2d:e0:29:ba:e8:
7a:af:6e:c8:a4:8b:55:a5:4b:18:4c:4d:01:d7:36:
21:78:af:a4:06:3a:59:5e:ee:2f:62:c9:0e:c4:0f:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8B:EF:C9:2C:56:96:D6:8B:C1:12:33:85:E6:E1:4C:7A:85:FD:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fd0ed70-da22-310b-850b-425b9d66becc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:67:bc:ec:86:1e:18:ca:f8:95:85:71:0a:2e:0c:bc:35:41:
e0:e2:aa:d5:12:56:bd:e6:4a:25:fa:58:e8:1f:75:b3:02:e7:
4f:b9:58:b3:96:63:af:39:62:04:99:60:df:ab:f1:f3:3c:5f:
08:9f:5c:70:d0:9a:9e:4f:f3:46:13:59:7a:d5:56:35:1e:04:
83:8e:98:8d:7f:a0:59:b5:3f:40:2e:89:c5:14:f5:00:a8:f1:
e5:67:88:1a:eb:61:d5:2e:c1:cd:c7:05:aa:0c:53:4c:2a:21:
2d:89:29:d8:bc:47:60:b7:44:4e:13:ed:91:9f:75:3c:67:ff:
57:1c:a3:c5:c6:90:66:e1:ea:50:9a:df:b0:29:c3:18:c6:c3:
0e:d7:4c:97:68:3d:ae:f4:e0:8a:5f:88:fc:50:4e:40:d9:a0:
8e:71:10:df:22:03:37:04:6f:20:72:e7:6d:6f:f0:64:b5:7f:
e6:e2:f5:1e:76:4c:19:aa:e5:f3:09:6c:7d:b5:f1:fc:28:de:
aa:fe:3e:4b:3e:14:61:0d:a3:90:39:fb:f0:65:f7:e8:6d:5b:
3c:e7:e5:00:23:c5:44:a9:a1:38:cf:0f:e5:88:9b:3a:c1:0c:
e7:4e:b3:a6:ef:5b:9b:b2:5d:fe:69:17:a3:44:59:70:98:32:
8c:72:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:36:46 2025 by rpki-client