Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c196f6a-ddc2-3f80-8f2a-1a55316388bb.roa
File: 3c196f6a-ddc2-3f80-8f2a-1a55316388bb.roa (raw, json)
Hash identifier: fWyCOSEQ3wmVZQS8yWSCQfZHowGDHDwlLqG8eDQA+ek=
Subject key identifier: EB:5C:29:FC:8E:53:D7:14:16:6F:EF:F9:96:F4:C4:C9:37:06:20:80
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A519223CE54569848F380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c196f6a-ddc2-3f80-8f2a-1a55316388bb.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.104.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:51:92:23:ce:54:56:98:48:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=7969a404-220c-4030-9d19-c8d5625a7141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:bd:2f:9c:84:33:56:84:ad:ae:42:95:0b:
e2:9c:5e:3f:9b:fd:cd:cf:98:64:42:25:0f:91:05:
c0:62:bf:ec:b6:16:0e:bf:a3:c1:ee:4a:33:97:2d:
67:6c:aa:6d:a3:6d:8e:1a:bd:c7:e9:88:54:85:90:
12:95:70:f1:d9:32:8d:74:e9:89:c2:e7:f4:a4:b6:
de:aa:3e:fd:07:62:2b:6c:ec:a6:c0:17:8a:87:c9:
c1:22:0f:6e:95:24:f9:19:b6:62:68:0a:4b:8e:4e:
b4:03:cf:ad:7d:a2:30:2f:aa:87:f1:17:63:be:20:
5d:70:38:f8:98:30:ec:e0:27:3c:92:8c:c0:27:1f:
21:1a:e3:c3:7b:cf:d3:35:b1:40:52:17:63:e6:22:
65:9d:08:db:81:9b:48:cf:a3:6b:8f:21:c0:ee:66:
fc:75:23:d9:3a:da:e6:a6:0f:4f:83:6f:7d:a2:49:
cb:18:eb:12:5e:25:a8:95:66:40:b8:bd:e2:ee:fd:
b3:51:a6:eb:28:18:9c:4e:21:7e:41:ae:5f:91:bd:
95:eb:27:16:48:96:b5:6e:8d:6c:81:98:7c:6e:6f:
79:da:d6:44:db:b3:db:e6:c6:a9:da:ad:4e:2b:93:
79:c5:c5:ec:39:1f:f2:c2:57:0f:2e:0d:d6:32:35:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5C:29:FC:8E:53:D7:14:16:6F:EF:F9:96:F4:C4:C9:37:06:20:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c196f6a-ddc2-3f80-8f2a-1a55316388bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:cc:38:d8:10:79:d5:42:5f:db:11:57:e5:24:9f:26:72:6e:
8d:07:66:82:97:22:61:56:65:6b:a0:9f:ed:46:a8:d7:66:33:
47:08:a1:63:72:c7:7e:0b:52:65:9e:82:17:a8:46:c8:23:ac:
b6:2a:41:59:69:3a:a6:5e:97:64:85:29:e4:6e:34:09:3c:2d:
2e:6c:ef:85:b8:2f:c8:f6:c8:94:67:f7:82:71:c5:4b:6c:55:
49:aa:12:78:66:f2:d6:b3:e5:ac:d2:1f:19:d6:4f:05:8a:e2:
99:86:04:6a:8c:ec:5a:dc:07:cb:ab:18:66:89:cf:e4:44:ff:
8f:fc:e1:01:b5:85:51:17:1c:92:c5:f3:57:d4:02:ca:53:93:
ef:79:97:ce:a5:1e:1c:5d:96:4a:1a:4e:b0:be:54:f3:15:6a:
80:eb:cb:33:d9:47:cb:91:75:e4:dd:f0:0b:24:0f:88:77:0c:
f5:ec:c0:36:46:21:83:4b:96:5d:c0:23:52:ab:6a:20:d9:e7:
cb:50:3a:f5:22:e8:31:60:7b:05:25:28:78:fa:cf:49:45:d3:
40:ca:e6:fb:a3:bc:89:0b:b5:6c:0d:ff:89:f6:9b:17:f7:11:
f9:f0:64:c4:07:2d:00:09:95:56:f4:fe:98:49:dc:a3:72:61:
1d:52:34:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:59 2025 by rpki-client