Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/352b827c-8094-3213-9d11-1d1bce567655.roa
File: 352b827c-8094-3213-9d11-1d1bce567655.roa (raw, json)
Hash identifier: iEPNq3mmK4Ue/OyZ+XKNbBx0geXJiALAkipJ+rg38Eg=
Subject key identifier: B2:EF:40:C5:96:C5:12:C0:5B:9E:D6:DE:EE:B3:D6:A3:06:89:AC:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A19B92F92A8F1BA70A09AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/352b827c-8094-3213-9d11-1d1bce567655.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.89.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:19:b9:2f:92:a8:f1:ba:70:a0:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=26313a31-b888-4024-a733-c0133dc7389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:a9:96:d0:6c:ff:bd:12:c8:0c:bd:ae:31:
a3:4e:03:3e:1a:f0:44:cf:41:7d:69:12:57:4f:e9:
0e:fd:32:66:cc:e4:da:ad:09:a1:5f:4c:cb:37:a5:
08:92:9a:a8:90:5a:6a:b8:3e:bf:21:01:53:ad:0c:
89:b7:56:b1:f2:d0:88:fd:25:25:70:c9:8d:34:73:
18:9b:e9:f3:54:6b:54:2a:02:8c:e7:9a:ea:5b:38:
0c:8a:05:ef:47:c0:29:98:93:d3:ff:ca:57:fc:a3:
61:9a:1c:61:6a:ff:9d:56:67:48:82:d3:6b:90:ad:
19:bf:9a:85:aa:d2:ab:99:a3:4a:c0:70:a7:d5:64:
cf:c5:fa:34:73:85:6a:20:2b:40:1c:e7:0d:68:cc:
b9:ef:73:5e:e0:e8:67:69:98:b2:62:5f:03:14:7d:
08:24:2c:a0:1e:7e:e8:7e:09:67:d9:c0:0b:1f:1a:
d8:ee:ca:c1:a0:6b:1a:40:06:0f:aa:e7:ca:90:56:
0b:2d:53:95:ae:1e:c9:8d:fd:64:3f:ff:da:03:77:
e5:ca:3c:64:9e:19:9e:8e:ee:5f:9e:1d:5d:00:07:
9e:b9:62:6a:b8:b0:64:aa:22:4d:e9:6c:05:57:21:
60:ff:02:e0:fc:44:59:39:94:db:01:b7:00:0c:66:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EF:40:C5:96:C5:12:C0:5B:9E:D6:DE:EE:B3:D6:A3:06:89:AC:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/352b827c-8094-3213-9d11-1d1bce567655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:f7:9f:1c:b8:5c:fa:b2:86:19:cb:de:0a:b6:f5:fb:77:26:
6c:92:b7:2e:d2:b9:0c:a8:2b:f4:f3:a8:9d:7a:a1:a3:21:b7:
b7:98:1c:d4:3d:15:8e:1a:31:2b:b5:b4:b6:69:97:3f:fa:5b:
8d:f2:62:11:d7:27:d1:3c:99:a9:0d:6c:dc:39:8d:f2:52:d1:
cd:02:2e:c9:39:c4:73:70:47:8b:50:3a:34:44:6c:75:a3:37:
ea:c7:3f:f6:f2:b0:3e:9c:5a:01:86:b5:08:a0:dc:5a:23:36:
62:9a:df:49:8b:d6:1c:61:d3:49:03:a8:80:0c:1f:b6:50:a3:
6f:84:7e:a9:ed:29:a3:dd:cc:d7:e0:9f:2e:71:50:83:4e:bc:
7b:86:bd:b6:e9:96:1f:c6:fe:3d:47:a7:98:f9:32:e8:81:38:
e5:e9:52:f2:ef:4b:58:1b:a4:cc:c1:48:e0:16:12:6f:32:20:
63:01:cd:c8:24:b1:2c:48:ef:3e:25:5f:47:99:30:5c:9e:15:
32:5b:a8:95:f6:a2:a8:53:e6:d2:b1:ca:20:0f:a7:00:25:54:
80:bc:ca:12:ba:ff:da:31:f1:59:93:90:51:85:5a:40:d4:5a:
61:d4:2e:c0:74:a0:00:49:ba:7e:e9:fa:16:c0:36:d4:8d:39:
c6:94:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:35:49 2025 by rpki-client