Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38742d92-d378-3859-a71e-a1d7a4e7e0ed.roa
File: 38742d92-d378-3859-a71e-a1d7a4e7e0ed.roa (raw, json)
Hash identifier: 0+h/sbgQyacJ4kB+gAVJk+5N40VQ4CS92HgkJG7ycXQ=
Subject key identifier: 18:C3:9A:BE:F6:2F:3A:69:10:7B:1B:D1:92:2A:5A:CC:EE:77:AE:F1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F8542CEDA1F22714CCD800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38742d92-d378-3859-a71e-a1d7a4e7e0ed.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.99.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:54:2c:ed:a1:f2:27:14:cc:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4dc3a223-1b1d-4d20-be52-b8692eb77815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:49:7e:61:ac:6f:95:e1:5b:38:56:a1:c8:
a4:7f:59:19:ca:68:f7:92:17:ec:a7:f8:95:52:48:
d5:66:f8:d7:0b:1e:d7:aa:26:7d:0b:dd:12:8d:de:
31:51:2e:32:e8:64:bb:c6:e3:84:39:b2:3a:42:c5:
d7:c3:60:bf:7c:43:4c:10:c3:12:98:09:f9:fb:25:
56:03:48:0c:fe:fa:4b:b3:be:68:b3:2c:83:a2:9f:
29:1b:1c:02:ed:2a:85:6e:87:d5:bd:d2:eb:57:f0:
be:32:62:38:8c:1f:0f:dc:03:b8:ca:42:dc:a7:99:
df:82:a7:49:b2:de:21:8d:1f:99:8e:a0:82:87:87:
91:86:69:40:a9:46:bd:d6:4e:80:f7:93:bc:0d:0d:
78:e4:5f:f8:47:fb:d2:12:c3:3e:06:dd:34:94:3c:
1a:9c:c3:c8:3c:3d:64:49:70:7e:12:27:48:ed:99:
61:db:17:f4:0e:e7:7f:a5:aa:55:20:87:41:a1:69:
8b:8e:63:84:9b:9e:e1:bf:79:67:4f:36:63:9f:0c:
e4:91:fd:e3:d8:7e:56:cb:e7:64:21:ce:59:ef:5e:
f7:e7:d5:17:23:9b:0f:fd:66:fe:ae:7c:bf:b4:bd:
52:d6:75:8f:92:8c:3b:8c:37:5a:71:24:57:79:e0:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C3:9A:BE:F6:2F:3A:69:10:7B:1B:D1:92:2A:5A:CC:EE:77:AE:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38742d92-d378-3859-a71e-a1d7a4e7e0ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:18:5d:c3:4a:43:1b:98:4d:7f:4a:fa:f9:7b:79:f3:1d:ed:
a4:24:4f:55:42:8e:34:a0:c2:7a:6c:8a:50:ee:cb:73:d8:d2:
92:2d:74:04:af:87:63:91:e7:30:31:13:5e:38:71:56:fb:66:
ab:4a:3c:74:9a:52:8f:2c:9b:e0:b1:9a:09:cb:b5:fc:ad:85:
dc:7f:d1:fb:c2:0b:eb:92:62:7e:1c:24:e7:fc:41:11:5f:4f:
91:85:2d:2b:d8:31:b7:06:18:9e:2f:b1:dc:90:dd:8c:4c:91:
f6:b9:0c:23:4d:45:39:99:24:4a:b1:01:a3:e4:91:87:e1:0c:
b8:42:2a:fe:46:45:85:0e:61:36:a7:9d:b8:a6:59:7c:1d:03:
20:14:1a:2c:d6:e1:8d:10:07:1b:59:f2:25:4b:20:a7:5a:24:
8e:91:eb:3e:b8:61:f0:56:36:83:37:d7:07:6b:cc:34:95:4d:
79:31:ca:dc:e3:9a:b7:28:10:08:43:c3:98:70:15:53:27:25:
ed:e7:29:e2:39:0d:67:09:a0:5a:0b:28:bd:9b:18:97:12:ab:
84:15:0f:f1:3a:06:38:28:a3:1e:72:28:cf:55:a0:b5:f4:0c:
ed:ed:6a:63:a3:99:d2:eb:60:16:ff:81:98:55:79:92:28:3c:
04:9f:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:46:40 2025 by rpki-client