Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/357b45da-e4fb-3ed6-af07-1a7c055abcc4.roa
File: 357b45da-e4fb-3ed6-af07-1a7c055abcc4.roa (raw, json)
Hash identifier: J/mCJFplqAUNZ3ZBFJvMg3D2sSgHl+bMRzK+YIKq/QY=
Subject key identifier: 7C:D8:91:B8:7C:3E:21:6A:62:81:63:5B:14:FB:FE:82:4C:03:B5:C9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F9329C4D17F764167F7240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/357b45da-e4fb-3ed6-af07-1a7c055abcc4.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.85.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:32:9c:4d:17:f7:64:16:7f:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d6dc36c7-ff80-4596-a4a4-50a08bcff998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:d0:75:46:cb:b3:85:6d:f0:8e:f9:13:3f:
90:c3:9f:e0:b2:e1:89:0b:cd:27:ea:b5:26:26:c8:
24:84:37:72:b5:07:47:1e:a6:24:24:36:82:e6:f4:
56:b7:f6:b6:28:9f:78:09:9f:4b:86:e1:58:16:35:
a4:02:c0:00:2d:bb:f4:59:e6:8a:8e:c4:2d:39:f9:
0f:bc:7b:87:89:72:a5:e0:b0:0f:cc:69:f3:30:3a:
08:31:fc:d5:8e:53:e9:c4:12:25:b0:12:13:9f:6e:
a6:5f:1f:94:80:06:00:8b:5a:50:1f:84:3e:bb:30:
b0:51:61:87:ce:6e:a9:75:fa:b6:36:75:ed:cd:d3:
a6:57:b3:2c:67:aa:cd:ad:fe:a4:99:f9:e2:f5:6d:
c5:15:7a:ef:b1:6b:08:84:3f:52:82:b2:11:81:6e:
d0:90:b9:43:10:28:fa:41:76:72:a9:0d:f9:00:d9:
81:18:ca:21:85:f3:ac:86:08:51:ce:a2:ea:23:f5:
d3:e0:a6:41:25:e0:27:6c:a4:35:17:eb:24:f2:82:
53:70:d5:af:a6:53:bf:ac:89:79:8d:8a:fd:c7:db:
bb:34:b2:a8:b4:39:93:ad:85:31:0b:98:11:22:83:
10:a3:2d:6d:cb:ce:34:dd:f4:0d:f9:3a:ff:a8:9c:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D8:91:B8:7C:3E:21:6A:62:81:63:5B:14:FB:FE:82:4C:03:B5:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/357b45da-e4fb-3ed6-af07-1a7c055abcc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.85.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:80:f0:55:95:92:18:9c:b5:b2:42:3b:87:8a:6c:3d:2e:a4:
f8:65:d3:a3:70:40:c7:56:d2:34:f1:01:85:4f:e1:48:b4:a7:
68:71:4f:ec:ea:fb:c7:c2:75:b3:1f:24:42:ae:ac:4b:98:30:
7e:56:80:b7:1d:0e:94:e1:fb:7c:91:05:45:94:71:e4:c2:1c:
34:37:10:df:3b:d9:87:4e:c9:6e:a9:fa:84:e2:eb:c7:a4:0a:
aa:30:86:36:bf:80:0b:d5:a9:92:97:08:00:a9:5c:30:f5:4e:
45:8f:8b:c3:08:86:73:a2:6b:60:a3:f1:08:c5:b1:8f:ee:2f:
9c:64:b1:72:be:e8:44:72:f7:9f:26:3e:e2:50:3e:55:6f:e1:
7a:d5:bd:e4:66:75:71:db:55:1c:2a:ad:df:53:2f:23:e5:0d:
94:d5:29:47:9f:25:aa:3e:9f:b1:4b:58:b8:0b:dc:36:5f:5d:
ba:42:66:9b:4b:94:0e:08:a1:2c:71:f5:f2:2f:fe:5c:29:c0:
f8:b2:7c:ea:46:8f:97:f9:61:d1:b9:67:9d:bb:f1:9d:71:da:
5d:c9:65:cb:94:eb:ee:73:f9:d8:a6:19:23:d8:63:b7:c5:9a:
28:78:48:77:04:e4:fd:27:83:82:d3:97:d5:80:95:2e:b1:95:
ac:97:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:14:17 2025 by rpki-client