Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b16e0f9-fa7f-3756-96ae-c7cef646c51e.roa
File: 3b16e0f9-fa7f-3756-96ae-c7cef646c51e.roa (raw, json)
Hash identifier: nlaetqLqXP0gGbuACSUXk1jJ604eNt5hOkkyoRqlKO4=
Subject key identifier: 5D:24:06:6F:09:F6:75:5F:8A:B3:14:C4:E8:91:2D:8B:64:3A:7F:84
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A277BB3121ACFA1925E4E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b16e0f9-fa7f-3756-96ae-c7cef646c51e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.102.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:7b:b3:12:1a:cf:a1:92:5e:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=130db0e5-04a5-477d-98be-c5c1e9fddd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:4a:fd:8b:5c:0f:e2:d1:9f:be:ee:0d:ff:
35:0f:20:5e:16:77:13:5f:e0:f3:5c:71:d7:8e:c3:
10:58:28:b7:f1:0d:18:63:fc:b0:60:23:95:9f:a7:
9f:73:28:67:38:c6:7e:07:4a:c5:2b:8a:8f:49:b9:
56:dc:0d:47:67:e0:06:b2:13:cc:ce:21:71:e8:1d:
53:44:2c:c0:4e:0e:43:ea:83:85:28:83:c3:b2:1d:
7d:c1:76:e8:f1:84:39:5d:57:4f:ab:a5:a0:1e:10:
f5:7c:4c:4a:60:45:ee:49:42:8d:68:3d:2e:b5:85:
ac:25:e0:2e:25:95:7c:f3:fc:47:88:c1:35:b5:17:
15:5a:8e:e2:59:4d:bf:3b:59:75:58:fa:ce:15:bd:
c6:e5:0b:90:a3:07:ca:fc:72:b8:4b:57:22:bf:26:
c5:78:fd:de:03:d3:a3:ea:cf:73:d0:52:52:bd:47:
8c:9b:cc:3b:45:f0:40:9f:6e:14:d6:b0:98:ba:16:
eb:7b:ea:17:33:9d:ce:5e:10:97:4d:0f:e2:fc:53:
60:3e:27:b6:be:9e:b5:61:73:e4:3d:01:0f:ab:50:
41:dc:ea:cb:27:31:ca:2c:a9:6d:b5:f2:40:e1:c9:
83:02:17:8c:dd:fd:4a:f9:3b:6f:6a:ba:04:eb:6b:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:24:06:6F:09:F6:75:5F:8A:B3:14:C4:E8:91:2D:8B:64:3A:7F:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b16e0f9-fa7f-3756-96ae-c7cef646c51e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.102.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:61:45:11:ed:08:9c:45:da:0c:25:1a:b7:d4:67:4b:72:4b:
e5:54:c9:c9:ba:9d:b0:ed:25:ec:f0:35:eb:eb:56:9e:35:23:
71:d0:95:fb:b9:7f:0f:0f:95:2a:3a:c2:58:8b:2c:b9:71:e4:
da:82:6e:60:d4:44:3b:38:cb:2b:46:cf:3b:4b:79:fc:f5:d0:
6d:a5:26:cc:67:2d:68:fa:a3:72:9e:d5:43:e8:b9:72:01:c5:
07:9e:9c:dc:0f:75:2f:5b:84:04:8f:7d:14:05:a5:4d:ea:5c:
a4:dc:f2:08:62:b7:b7:d1:47:bb:ff:da:f1:a7:3d:b6:d9:de:
66:ae:a0:04:d0:2a:27:b3:3f:22:3d:ce:15:7e:00:51:94:b1:
92:0a:aa:05:94:a3:80:aa:1c:e8:77:be:c6:7b:d2:2c:7c:15:
bc:d0:dd:40:ad:ec:71:eb:b8:8a:04:b2:a2:e6:4d:dc:36:83:
b7:74:09:18:c3:10:54:d8:19:77:b3:1f:01:31:c9:f3:71:1b:
ac:8b:13:c4:22:81:a5:ea:e9:86:5c:1c:c6:dd:ac:64:db:e4:
c8:e4:3f:d9:a9:49:f0:58:c9:7d:8a:d0:ee:fe:7f:fc:d5:94:
a0:3a:c5:52:83:b9:2d:44:32:83:cb:92:af:2e:40:74:e8:16:
ec:6c:1a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:06:54 2025 by rpki-client