Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38ac25e3-9203-3f67-9da0-b0bb23b48c68.roa
File: 38ac25e3-9203-3f67-9da0-b0bb23b48c68.roa (raw, json)
Hash identifier: SyVldAh8rb45gsb3EJQtq7CeO0j2dstCpLeqpuGVm74=
Subject key identifier: D1:0A:B2:74:65:19:C5:C3:56:30:03:31:F2:EA:EE:33:4D:59:24:5D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EF8040EB9FBE8137F70A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38ac25e3-9203-3f67-9da0-b0bb23b48c68.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.96.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:80:40:eb:9f:be:81:37:f7:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a269d467-0028-4520-9363-6fc0ef4597a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:31:04:69:b8:55:5c:8d:03:14:89:46:a0:
ca:44:bb:22:01:b0:83:ed:a2:55:ce:6f:a5:48:ea:
93:fd:4a:4d:1b:75:02:39:9d:18:d7:b1:05:cb:51:
f3:35:5c:2b:b3:52:58:f2:da:ad:8f:b9:3a:37:7c:
22:1f:5b:99:ab:61:35:2e:c3:d2:9c:a7:b7:de:8f:
15:60:9e:3b:bf:a4:6a:4e:62:ab:31:f8:ff:6a:18:
ae:a8:34:5e:8d:5d:47:27:31:84:0f:36:28:06:2c:
ef:15:aa:df:fa:57:96:2f:50:86:d4:fd:21:cb:2f:
f9:3d:a7:17:9b:dd:4f:61:45:f2:a8:0e:61:03:a1:
06:a6:8f:16:ab:57:5f:23:de:49:f0:49:03:1c:4f:
25:38:29:21:15:14:93:43:b2:43:4a:b6:93:36:a6:
ac:98:da:17:28:8d:fc:ae:ad:cf:ae:52:74:2d:95:
aa:d2:87:2a:23:fa:74:67:cd:4f:ce:c3:31:81:45:
9b:05:a7:49:9b:52:f5:b3:74:ae:4e:6b:cc:84:62:
88:91:bd:0c:b2:6a:a0:23:f3:c0:8d:b9:ec:23:e0:
b8:0d:22:dd:3d:b9:cb:b3:a0:44:a9:1b:31:c9:0e:
96:ca:14:7c:a4:44:20:90:80:00:31:ba:19:f6:4b:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:B2:74:65:19:C5:C3:56:30:03:31:F2:EA:EE:33:4D:59:24:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38ac25e3-9203-3f67-9da0-b0bb23b48c68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:44:77:45:e6:5f:66:59:5e:b6:7a:5a:bc:44:32:59:54:74:
7b:e8:a9:31:59:a8:1d:24:1b:8f:ba:d9:3b:c0:4d:ab:3a:7d:
55:39:83:7b:41:ab:87:d1:e3:83:42:57:39:a2:cc:79:9a:55:
1c:05:f4:79:2a:16:c5:9d:90:3f:26:4e:70:0a:e8:4a:86:a1:
54:a1:ee:46:2e:09:d1:01:95:e7:e3:a9:7a:4b:c7:0a:e1:65:
1f:a7:e6:03:7c:32:77:ee:0d:2c:c6:37:b5:e2:43:10:d2:be:
1f:7e:17:46:da:c5:1b:06:31:ba:a4:79:fb:2d:f5:23:03:2b:
8b:4a:42:2d:65:eb:9d:85:73:15:18:7a:4e:1c:84:db:29:71:
eb:11:15:19:87:ea:83:36:60:bd:4d:00:5a:0b:96:e4:80:b1:
6f:ec:53:e8:73:9b:f9:cc:32:3f:2a:78:f0:65:76:f1:dc:b8:
55:02:91:1c:96:1e:9c:fb:fe:e7:b3:b0:17:73:d5:f7:c8:a4:
29:e0:93:0c:90:38:6c:e7:65:82:b5:58:3b:48:c1:cb:f5:41:
1a:4b:1f:19:9e:4d:db:a7:5e:0a:6e:9c:65:94:c7:b8:44:61:
69:d3:73:59:10:28:17:c7:5d:49:ce:f2:ba:36:49:cd:a1:38:
fb:e1:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:46:44 2025 by rpki-client