Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/356ba4c8-a0f0-391e-9b87-b837a7119a6a.roa
File: 356ba4c8-a0f0-391e-9b87-b837a7119a6a.roa (raw, json)
Hash identifier: +NMv0UDbfjer0uXpUhJMiAYp6a2Sl2GrR2FykDKR0GA=
Subject key identifier: DD:37:4F:D9:AA:EB:FA:DE:64:AC:88:1A:9E:1F:37:29:0A:26:BA:73
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE85F60D162FA46017195640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/356ba4c8-a0f0-391e-9b87-b837a7119a6a.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Sun 29 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.155.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:85:f6:0d:16:2f:a4:60:17:19:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Sep 29 04:00:00 2024 GMT
Subject: CN=b8e8b44a-8958-41f1-9323-c57321c71746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:a7:3c:45:37:fd:6a:70:76:45:a6:38:7b:
06:71:63:c5:d6:50:69:ab:59:3d:d4:82:4d:3a:49:
54:8f:36:fb:b2:94:40:93:c7:ef:13:e3:ef:21:34:
0d:5d:cf:2d:20:82:f1:e7:ee:5f:7a:b5:b7:80:09:
2d:29:4e:76:5c:b6:91:90:8d:3c:d6:65:be:5e:25:
83:00:94:6f:d9:e4:d9:83:9e:9e:f8:20:0b:a9:fd:
6b:c1:43:aa:51:c7:84:65:55:8b:1f:36:4a:9d:a7:
b4:29:cc:68:71:27:4b:8b:22:80:12:36:cb:70:8b:
b4:d2:52:dc:c2:d8:77:0d:85:a1:b8:c6:33:0a:fb:
f1:e1:80:2b:12:ff:cc:cf:54:d3:dd:25:32:cc:73:
c3:50:6b:4a:00:98:e8:e6:3d:cd:07:8c:94:38:e2:
9b:a5:a8:90:82:80:e8:f4:38:49:63:aa:98:6f:05:
0e:13:90:66:62:a1:91:18:44:29:76:c9:db:51:1a:
a4:c3:1c:89:b3:37:e9:65:90:3a:d9:66:d7:99:f7:
cb:b9:fa:a7:17:ee:7d:45:4a:56:18:42:aa:29:02:
f2:ed:97:2d:40:4f:4c:c7:d3:aa:ae:4f:a3:b9:c3:
82:db:24:51:b6:66:87:fb:87:fa:c9:c5:a2:3d:cd:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:4F:D9:AA:EB:FA:DE:64:AC:88:1A:9E:1F:37:29:0A:26:BA:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/356ba4c8-a0f0-391e-9b87-b837a7119a6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.155.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:62:7e:4e:a8:44:49:68:12:58:15:90:63:40:15:c7:a6:49:
f9:11:44:04:50:c7:6f:a6:28:f4:40:21:65:c6:32:9c:cc:ab:
87:89:56:87:79:00:54:c8:ec:7e:9a:3a:55:49:89:48:c2:59:
ff:32:63:74:0d:8e:7c:08:a4:11:fb:3e:2b:75:17:31:bb:5d:
e7:43:96:61:83:dd:32:1e:fd:d4:4d:9d:cc:fa:0c:37:4b:db:
6c:64:c3:7b:e5:c4:7b:45:17:51:d8:23:01:a7:d0:67:24:14:
a8:68:5f:41:52:24:44:0d:7f:29:54:e5:ab:c7:10:ee:84:1c:
47:23:9d:ef:4a:a8:8c:7b:c3:ca:a9:55:4e:b6:ec:aa:9d:23:
e4:66:cb:33:3f:05:2a:3e:55:ec:74:b6:92:63:c0:81:c7:09:
b2:13:2c:df:f3:28:49:bf:9c:f9:e5:27:ae:d8:d3:4f:32:d2:
5e:24:b0:ff:fd:a6:ed:f8:e7:5f:5d:6e:ba:17:35:bf:16:7e:
cf:b8:76:ed:5c:76:99:38:2f:c0:54:dc:98:a4:af:28:28:1c:
b1:70:14:e7:31:2a:2f:aa:fd:4c:c2:44:43:2e:26:9a:f1:76:
41:d2:5f:38:34:3a:76:ae:5d:7d:c3:fd:3d:8e:15:a7:aa:08:
5a:e8:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:32:41 2025 by rpki-client