Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a1f4771-13e5-36fc-89f2-aa5ece6d0457.roa
File: 3a1f4771-13e5-36fc-89f2-aa5ece6d0457.roa (raw, json)
Hash identifier: HZzAu8jReziLmz+L8Wc0VtplEGYPribBj8FtvpQGv60=
Subject key identifier: 5C:32:17:36:D8:44:20:E1:A3:54:05:36:67:FC:0C:AB:24:8C:7A:48
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A14FFFC2378E60A954E46C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a1f4771-13e5-36fc-89f2-aa5ece6d0457.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.145.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:ff:fc:23:78:e6:0a:95:4e:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8f0a3950-5951-49eb-8f39-3eba5db5cb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:ec:db:bc:30:d3:a1:bb:4c:7a:71:e9:a2:
ae:7e:b9:e3:ea:02:22:4f:d0:1c:ab:12:02:16:4a:
76:0e:83:b4:f4:c4:73:30:85:54:b0:58:01:58:6c:
93:fa:6b:d8:30:92:cb:d2:1c:99:82:9b:2d:60:00:
0a:98:7e:e4:bd:79:92:5d:dd:8f:23:ad:d5:54:f5:
ee:d8:58:ae:2c:e5:23:38:4d:b7:6a:e1:a3:bc:58:
41:ea:a2:34:eb:3d:8f:fc:6c:e5:46:6c:38:aa:a5:
d2:31:28:b3:27:78:ad:e1:c6:60:54:ff:ec:c6:08:
0f:80:18:18:eb:4b:d8:69:ba:9e:70:95:6d:2e:4a:
a8:c8:f6:47:5a:4f:3a:9f:07:31:dc:66:e3:f1:ad:
56:51:84:e3:d1:02:f0:2c:93:f7:76:41:7d:0d:b6:
fd:a4:47:77:76:b2:d4:a4:74:e8:87:4d:29:29:86:
04:17:e4:3c:d5:bc:d1:ab:a6:9a:5c:a6:6f:39:7b:
2c:25:63:9d:25:0e:6d:1f:8a:25:99:a7:44:72:fe:
e9:14:9a:4d:65:d0:fa:82:fd:95:10:95:53:f4:d0:
c5:02:f8:20:ff:33:2c:23:c7:09:c9:9f:58:50:54:
29:2a:09:a6:07:69:fb:79:4a:10:72:c0:d1:fc:2c:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:32:17:36:D8:44:20:E1:A3:54:05:36:67:FC:0C:AB:24:8C:7A:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a1f4771-13e5-36fc-89f2-aa5ece6d0457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.145.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:cd:21:a3:e8:a1:1f:07:c2:90:45:a3:bb:30:84:08:f3:a6:
74:74:f1:3e:0d:f7:37:12:af:ff:f4:6c:61:b6:4c:0b:8c:ac:
26:fb:39:06:18:26:14:8f:99:11:da:09:98:d2:1f:d6:57:77:
36:80:c1:13:31:1c:55:da:b6:b9:72:86:5b:5b:3f:75:ea:17:
b2:28:53:4c:35:83:77:15:1a:71:2a:6e:12:48:a1:80:e3:4c:
75:24:6b:b1:78:14:07:ff:f7:4d:87:7c:5c:1e:5e:d9:56:7b:
75:01:5e:a8:0d:40:5f:09:93:c0:50:56:53:f7:f4:e9:e7:72:
53:8e:69:c2:9d:8f:dc:da:f7:e0:1f:e3:6a:42:d1:2a:98:e4:
7f:2b:e6:4e:7a:bc:31:b6:98:89:ab:56:c1:25:8d:3e:07:88:
bd:96:54:7d:8e:31:5f:c7:d1:be:0b:e6:6a:ca:7c:64:0c:be:
d3:df:52:86:aa:dc:0e:03:ad:29:b7:46:d3:32:9b:a0:32:ee:
96:da:ad:b2:22:4a:fe:e0:b1:f2:19:2a:44:67:23:2a:28:8a:
d2:6a:f4:c6:9f:c8:8a:0d:48:1b:c1:ce:0a:48:6f:73:6a:d6:
65:e1:12:cc:ab:f9:4d:81:71:ac:61:5c:b9:83:a7:e4:76:5d:
f6:ca:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:09 2025 by rpki-client