Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b0fb07a-f2cf-30e0-a4b7-e2fad095e88f.roa
File: 3b0fb07a-f2cf-30e0-a4b7-e2fad095e88f.roa (raw, json)
Hash identifier: tTSMkGm5qUthpu9tSq+fWd5QgGaJUNBy7ivRVL9PKiI=
Subject key identifier: 0C:E7:B4:78:ED:85:BF:AE:F0:17:AA:C8:66:01:80:3C:03:13:6D:FA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EE115F32F7F9B1347D2D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b0fb07a-f2cf-30e0-a4b7-e2fad095e88f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.98.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:11:5f:32:f7:f9:b1:34:7d:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=df568974-699e-4f08-9fd9-fe995c749852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1f:98:7a:d0:d9:92:39:f6:78:04:15:1f:ba:
77:78:c8:7d:d3:fb:90:12:b9:2d:4f:da:bb:b2:b5:
84:d4:e2:05:72:c7:2e:4e:04:08:c5:63:c0:d0:d9:
29:ea:49:ff:cd:10:0b:45:9e:dd:47:ca:d6:a4:64:
26:b5:59:0c:98:28:65:47:1d:9f:72:0f:47:b8:80:
92:d7:c9:38:6b:49:50:56:66:a4:9c:99:c5:f4:1c:
95:9d:49:08:12:77:bf:f4:70:de:06:03:a6:eb:9a:
b6:84:51:c6:db:df:d9:a9:6a:be:bf:6a:31:eb:42:
a3:de:3b:cd:31:4f:d6:96:70:2f:e5:95:42:27:a5:
54:ba:06:c2:d4:df:c9:be:f8:5b:67:92:db:20:5e:
75:a3:c3:5c:87:9a:76:47:2d:4c:25:a2:14:aa:fa:
56:38:ce:12:47:36:b3:0a:58:41:d5:ff:4f:2e:7b:
f2:e4:9f:f8:c9:63:18:78:82:33:cf:54:37:02:53:
b3:88:57:51:95:7e:8f:d9:5f:76:67:20:dc:d1:1b:
fb:2f:a3:7e:48:97:0c:97:da:fd:a1:4a:f9:e1:2c:
e0:8d:5b:5c:a6:62:60:da:4a:37:54:53:02:f1:53:
52:47:e6:f2:13:c5:63:32:7a:93:7e:6c:56:28:4d:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:B4:78:ED:85:BF:AE:F0:17:AA:C8:66:01:80:3C:03:13:6D:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b0fb07a-f2cf-30e0-a4b7-e2fad095e88f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:89:74:8e:03:2d:54:3b:2f:c6:75:9e:db:a5:2d:43:a0:fa:
d0:ba:1c:d5:f1:3d:30:b6:bb:bb:c6:b5:ce:f5:84:b0:18:46:
e5:06:6e:bd:aa:1e:e7:b1:f8:f1:9f:08:06:68:44:9e:be:11:
9d:5b:62:dc:29:43:ef:4b:b2:c2:3a:50:36:69:08:c1:9e:d3:
f9:60:5c:69:70:c8:d6:df:14:4a:e8:3f:cd:7b:a6:f4:d2:54:
d1:d7:d6:6f:28:62:8d:f1:ec:77:8b:5e:cb:c0:10:04:a5:5f:
8f:e0:ba:8b:7c:d2:a7:ba:52:03:cd:90:67:48:c1:0f:93:ce:
c2:fe:bb:d6:ef:0e:9d:34:9a:6c:f8:a0:b3:86:e7:98:a1:f4:
c7:53:8f:a4:8a:8d:3d:dd:32:62:61:da:ef:ca:b1:09:8f:98:
c9:60:61:d5:d9:d3:c8:3c:ea:11:45:28:32:37:47:6c:a3:74:
46:4f:28:3d:52:38:f3:35:a9:ae:62:6d:d7:20:5a:9c:f0:8b:
87:ca:64:73:ef:15:bf:a5:0a:9d:ab:a2:cd:36:52:5f:c2:5c:
c7:0c:1e:36:a3:f2:1c:d6:fa:40:ab:ae:4a:bf:84:32:86:be:
d4:31:a7:65:88:e5:68:35:1f:57:d4:71:1f:70:83:71:cb:91:
41:eb:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:45:43 2025 by rpki-client