Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a60d037-4517-38cf-bd11-35f49c5c89a6.roa
File: 3a60d037-4517-38cf-bd11-35f49c5c89a6.roa (raw, json)
Hash identifier: bhQORpll89LMA39UxWgK/KnFbXwsC1rqbcviaQ7/Dao=
Subject key identifier: 64:40:C5:FB:9B:5A:B1:92:26:90:99:35:59:A3:1F:4C:04:63:4B:CC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1DDA0F8D1F49E2EC8F9780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a60d037-4517-38cf-bd11-35f49c5c89a6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.74.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:da:0f:8d:1f:49:e2:ec:8f:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=82f8cc44-5cc8-42d2-b3fa-9be8ad2ecd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:22:74:f4:1a:42:b3:da:62:9f:dc:56:bd:
a1:b4:4d:58:78:d5:e0:d4:72:e1:0a:0a:ca:d7:58:
59:86:81:8e:95:e8:6e:49:db:9b:bf:6c:13:ff:b4:
d4:2d:f2:e3:66:a9:8c:4b:6b:b9:0d:c3:bb:e7:ae:
0a:57:ad:d5:00:94:df:52:06:99:0e:77:9e:f4:cc:
91:7b:b0:36:bc:69:d9:b8:c8:b0:32:d3:4a:0e:ef:
ee:a4:5d:3e:fb:6a:be:fd:f8:66:9d:03:6c:f5:22:
d7:30:5d:fa:4e:c6:ca:d5:20:dd:47:96:62:50:f7:
29:7c:79:fa:d8:2f:33:a8:67:49:b2:e4:fb:0c:77:
ee:d2:77:81:3c:10:db:20:67:ad:ac:c8:66:55:95:
57:c5:4b:63:fa:e5:51:c8:66:d5:0b:37:cc:cc:f4:
8d:59:3b:65:1b:ef:71:8e:3d:ed:7c:a7:a9:7c:68:
c7:d2:59:cc:3e:ab:e5:7d:ae:ae:d1:2e:eb:46:c0:
68:d5:11:bb:7d:91:ef:59:7d:01:8f:24:6d:1c:73:
37:c7:6b:fd:bc:ed:d6:ae:13:50:28:61:4d:cd:ec:
e3:64:e9:39:ab:b7:b5:fe:26:f1:16:cb:53:f4:b3:
6e:ca:46:ab:db:33:6b:20:ba:5c:7f:f2:cc:63:1b:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:40:C5:FB:9B:5A:B1:92:26:90:99:35:59:A3:1F:4C:04:63:4B:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a60d037-4517-38cf-bd11-35f49c5c89a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.74.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:1a:52:38:e9:fe:d0:cf:5c:4e:0e:35:0d:5c:87:a1:38:1c:
4f:c4:1b:b3:d8:44:99:a0:eb:fd:9e:76:40:da:0e:5a:9b:fe:
e7:40:49:b7:2f:3f:53:5d:cd:f8:81:d1:93:df:82:a8:41:a2:
7d:f4:03:ac:9d:4f:70:b5:57:3b:8f:dc:d4:66:9f:59:42:1f:
49:57:ca:2d:71:93:ae:19:be:0e:d9:98:e3:d2:98:95:9b:cb:
39:af:f3:9a:a5:6d:db:cb:18:06:3a:ce:ff:94:7e:a5:c5:e9:
d6:f6:88:45:0b:04:55:71:11:ff:fd:c5:b2:6e:af:c2:67:82:
62:07:0f:bf:02:9d:0a:5c:af:b3:b9:f3:4a:09:4e:f9:49:7b:
d8:9c:2a:3a:e6:2a:11:d8:83:3a:eb:48:dd:71:96:df:64:74:
c9:00:5d:6f:49:33:04:85:b1:4d:27:17:db:a2:85:45:76:a0:
98:c5:71:b2:24:c2:d7:b0:a2:88:72:0a:ac:3b:41:30:b3:47:
3e:a2:37:9d:ef:4e:d7:fb:2b:1b:11:bf:cc:75:3e:b5:ae:55:
58:6c:9b:55:fa:b7:af:67:00:7b:54:ae:d6:5e:90:c3:e0:ea:
56:60:b4:3c:d6:14:62:39:66:5c:96:4f:e7:cd:78:7b:1e:75:
df:f1:3c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:28 2025 by rpki-client