Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/363b2334-b9c2-3c13-b255-232b4d2e7c2f.roa
File: 363b2334-b9c2-3c13-b255-232b4d2e7c2f.roa (raw, json)
Hash identifier: uEA1BVB5clcttRwj+JCO7Dx6HgvcPDw9jk/Nd1VsVTg=
Subject key identifier: A2:4F:7C:A2:D6:1D:92:58:20:09:6C:9C:DA:5C:BB:3D:CC:0E:44:71
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FA4828FDBAB9DFB2E15E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/363b2334-b9c2-3c13-b255-232b4d2e7c2f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.99.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fa:48:28:fd:ba:b9:df:b2:e1:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=db55a0df-8f85-423d-8056-0b2239d563e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:c2:aa:8e:d3:45:02:86:83:6e:82:83:68:
65:b6:06:bc:df:5b:de:69:96:11:22:e4:a4:d8:87:
c5:31:97:8b:0e:59:32:13:a6:34:a9:82:f1:48:a9:
52:59:5d:05:58:96:61:94:02:25:9b:f9:d9:45:57:
c7:00:e8:bb:92:68:73:d4:f9:f3:ea:ab:54:b8:5b:
94:28:f1:20:9e:a6:e4:16:d2:52:22:cb:26:fc:7b:
f7:9d:82:c9:66:13:06:7b:21:1b:55:40:bd:d2:e8:
42:4c:81:52:b8:60:92:10:de:04:f5:6c:e4:ad:8a:
f1:0d:2f:3d:be:71:6f:3e:1a:a1:c1:a7:27:13:76:
f7:79:0e:d4:d4:d8:06:e1:8f:64:be:99:dd:ba:a8:
84:ca:67:5f:17:4c:f0:9c:97:93:be:56:8f:32:b9:
41:16:72:eb:b4:4b:75:73:4f:03:55:65:c6:94:1f:
b6:5c:c7:6a:83:cd:d7:26:2c:69:5c:87:0f:9b:ce:
ec:de:b9:50:e8:9f:9b:18:b0:1c:54:91:a3:da:49:
40:7c:08:6a:da:fe:34:eb:f8:e9:4a:1a:db:02:14:
4c:02:6b:11:6a:a0:2a:51:46:99:89:cf:b6:6e:35:
fd:95:e9:0d:90:17:fb:d2:c6:a1:10:48:5d:da:e9:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4F:7C:A2:D6:1D:92:58:20:09:6C:9C:DA:5C:BB:3D:CC:0E:44:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/363b2334-b9c2-3c13-b255-232b4d2e7c2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d1:6c:b3:68:69:14:b4:af:35:c6:69:48:bb:8e:39:36:3a:
d5:85:19:41:53:d8:47:8a:53:f9:91:ad:76:e5:83:04:ec:a8:
8b:d9:1b:49:de:0c:c7:ee:20:7e:38:94:e9:9c:86:0c:7b:bb:
7a:9b:9a:f8:8b:4d:7a:08:74:de:66:d4:14:3d:44:4a:25:04:
11:14:0b:74:39:3e:1e:74:87:a5:d8:ed:31:3c:49:e3:3c:17:
33:46:7d:e8:fd:88:57:67:9d:c9:d0:57:1b:1d:ee:15:45:69:
92:20:83:0b:1a:e0:93:45:aa:b9:7c:78:ee:eb:97:3b:8d:93:
36:63:86:f7:bb:59:a3:db:a8:0a:3b:91:f1:97:92:be:70:58:
32:d7:6c:d3:63:7b:71:40:77:c1:82:4e:38:f3:07:76:af:85:
c3:cc:23:8b:11:61:ab:c0:1c:f3:77:a6:78:f4:88:af:13:a2:
7c:85:e2:d5:6c:8c:d1:d8:32:85:d8:01:76:47:ab:fc:1d:26:
03:2a:d3:68:ce:a8:69:65:8a:6f:11:51:21:4c:c5:7e:48:0f:
0b:b3:dc:d0:d5:e0:7b:11:f2:12:27:26:fa:19:85:eb:22:85:
df:58:93:3f:3a:0b:7d:4d:a4:09:ff:cc:12:24:a1:8d:4b:f4:
90:22:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:59:14 2025 by rpki-client