Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30786ff8-706b-3d71-93f4-210504dee181.roa
File: 30786ff8-706b-3d71-93f4-210504dee181.roa (raw, json)
Hash identifier: Xi+vGk30hK0cKSNmxfatRCysJEuh2AGZe2+GIaE1AHI=
Subject key identifier: 0D:20:8A:F4:CF:F4:30:BB:1B:22:9F:43:21:BF:D4:F1:0C:37:37:F3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FF0CD468B3EACB8279D320
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30786ff8-706b-3d71-93f4-210504dee181.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.96.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ff:0c:d4:68:b3:ea:cb:82:79:d3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5a6c0d1d-8a9e-456a-9cd6-611534427d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:f4:ef:d3:d9:8d:8b:fe:05:39:c2:d1:c3:
3e:a7:ec:40:d3:21:a8:f8:8b:1a:32:52:58:aa:de:
6f:5e:ba:a7:3d:62:5d:bb:cd:ab:57:3b:0e:b0:d2:
58:60:88:68:72:b0:ac:64:c6:6d:a3:af:d1:84:f7:
19:c6:3b:52:6f:d8:e4:1a:a5:68:91:87:c2:ce:a5:
6f:1a:ab:01:b3:fd:23:99:e4:07:6e:0e:81:cd:6c:
6e:1f:6e:53:c2:18:6d:8c:75:dd:d5:6a:fb:b1:ff:
ba:aa:cb:be:d4:3f:dc:fa:66:ac:2c:8f:0d:56:d1:
53:2e:9b:29:b1:18:9f:dd:d1:a7:6c:48:c2:29:b9:
e8:f2:68:17:51:04:05:08:c9:0a:b6:e9:3b:93:02:
18:59:a4:08:cf:79:bd:89:0a:62:9a:f6:d1:2c:50:
c9:8c:79:0a:93:b8:c5:dd:29:4e:91:f6:ed:02:94:
29:a4:55:75:e2:8c:c6:af:65:26:f9:1d:9c:df:42:
df:db:19:42:2c:7d:4d:3c:56:fe:f1:c4:e5:2b:66:
28:e8:5f:a5:61:f8:ab:ce:21:44:d4:71:f3:3e:b0:
57:f8:e6:2a:99:5c:e1:40:5c:4a:39:e8:8c:1b:9a:
ea:01:4a:58:fc:a8:b3:8d:fc:71:90:ca:08:b1:3e:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:20:8A:F4:CF:F4:30:BB:1B:22:9F:43:21:BF:D4:F1:0C:37:37:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30786ff8-706b-3d71-93f4-210504dee181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8a:1f:86:e0:26:07:20:f8:48:06:e9:0e:43:f0:23:c7:0a:
02:07:48:fa:49:8c:66:67:28:8a:28:c7:a5:dc:18:4c:aa:4a:
a3:b3:ca:28:2a:57:11:15:66:0b:27:5d:0a:db:df:d9:d3:4d:
39:7b:29:39:90:43:b8:3c:78:fa:e2:b7:83:a9:b3:5b:dd:e3:
7a:13:e5:bd:e7:d3:d5:9e:20:12:d5:85:86:cd:65:0c:a2:e0:
8e:f3:65:9d:d5:2a:a3:0c:a8:75:d8:9b:b9:a0:c1:7f:c7:28:
37:6f:8f:92:e1:76:3f:22:04:0f:b5:68:d4:91:9c:d3:f0:7c:
fc:56:a9:ba:4f:3b:d3:d1:52:d0:59:c5:a6:56:9a:ca:f1:27:
e5:f8:49:56:29:6f:86:1c:2f:6c:37:09:60:3d:35:25:b1:5b:
e1:2e:be:58:6a:21:d9:b4:6b:68:32:3a:db:e8:72:08:76:3d:
e2:37:20:52:30:0d:af:19:4c:a3:f5:6c:55:e9:cc:27:3c:15:
9e:f0:be:cc:26:48:21:29:c2:43:4a:6b:75:9b:82:43:5f:4c:
f7:a5:37:7d:f4:4d:8d:c4:5e:a1:e3:ce:0d:fa:e1:a9:5e:5b:
8e:f3:7b:88:21:9d:b8:92:49:d0:30:a7:f4:65:91:51:8e:9c:
06:ab:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:05 2025 by rpki-client