Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a4bdfc7-e63a-34a4-838d-108a5fe6494c.roa
File: 3a4bdfc7-e63a-34a4-838d-108a5fe6494c.roa (raw, json)
Hash identifier: 91eHmfPLEMcgqSDFBmomyRi8g3tDfrILuCvZWFKs7ms=
Subject key identifier: 93:9B:4C:14:6A:37:93:A9:68:8B:EF:BC:8F:EC:6C:83:F2:C1:08:6A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B065259ED541EEF5DDCB2600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a4bdfc7-e63a-34a4-838d-108a5fe6494c.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.127.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:25:9e:d5:41:ee:f5:dd:cb:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=04681190-5985-4d19-b43c-b6aefd259a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:e8:69:0a:cd:31:2e:a3:e6:3a:93:ee:f5:
15:a7:4d:9d:6c:5a:4c:1b:54:61:d7:f1:2c:de:0f:
89:ac:81:d5:0f:fa:83:33:21:47:87:56:4e:70:45:
83:d6:44:cc:b1:1d:21:c2:e2:ce:67:1a:c7:8a:cf:
00:37:8b:b5:10:ca:e5:1e:68:fa:07:54:03:7e:48:
9b:9d:78:e4:62:78:54:31:18:ae:51:41:ad:50:13:
4c:ab:33:2e:f0:e6:dc:70:f6:c3:24:3d:c4:08:d4:
59:77:bc:b0:2e:b6:9d:9a:30:56:40:5b:72:1d:79:
a6:70:f8:5e:3b:48:56:76:76:00:42:94:b7:20:da:
6a:7f:c4:49:cf:07:cd:8e:83:7f:30:e2:5a:bb:3e:
24:80:d0:1b:d2:79:41:37:7a:42:5b:7b:a7:c1:68:
c8:c4:d9:88:5e:54:1f:23:f0:58:0c:fc:03:b6:04:
56:03:2a:5e:af:cc:d6:17:8a:e4:87:51:c3:d3:6e:
c5:54:db:f4:00:33:54:a6:90:65:01:0b:cb:2b:3a:
d7:d9:af:7b:4e:24:8e:c8:e6:1d:71:0d:3b:33:c1:
e6:96:af:67:ec:6e:66:86:f9:40:e4:71:6d:42:d0:
88:13:80:0c:d8:1b:78:80:e4:68:a3:58:fd:e6:b0:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9B:4C:14:6A:37:93:A9:68:8B:EF:BC:8F:EC:6C:83:F2:C1:08:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a4bdfc7-e63a-34a4-838d-108a5fe6494c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.127.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:de:5f:c3:ba:68:e9:a4:b4:db:fc:d8:d8:f5:b8:c1:e7:5f:
e5:c8:0e:c7:03:89:4c:4d:13:7d:a3:c8:a4:90:05:e3:2f:be:
16:56:c7:6f:19:1b:91:c4:17:a3:84:c4:d8:2e:17:db:5d:80:
ea:1f:6d:89:f2:cf:fc:73:cf:c3:0b:59:e3:24:87:d5:0b:8a:
02:e2:fb:82:5a:ed:6e:20:59:2d:d3:08:05:e7:bb:d2:b6:25:
64:94:90:3b:f9:f9:94:09:e4:af:a4:dd:7e:92:e4:6d:10:ac:
b5:27:1d:7b:1c:b5:99:6a:cc:b6:cd:3f:1d:74:f4:d8:55:19:
13:b4:e8:cc:e3:af:20:c7:3f:50:4a:47:cb:c4:74:4e:3e:da:
a3:36:d7:2a:b7:29:1a:06:0c:fb:5e:1f:a7:90:30:91:0f:4e:
ff:8a:71:d8:84:d7:2b:6f:08:90:2f:fd:db:70:dd:0e:46:b9:
33:f2:28:63:55:94:e8:bc:e2:a0:0b:31:fd:7b:74:77:0b:29:
24:83:be:1c:ec:13:84:01:53:cf:56:93:12:b8:19:16:34:28:
06:f4:45:17:e0:35:24:15:ba:b9:51:ab:75:c1:64:e9:11:e2:
b2:46:06:1c:a9:49:6a:30:87:2b:05:84:c9:d2:f9:10:57:83:
c4:c2:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:43:17 2025 by rpki-client