Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cbd7d3b-f9f7-3d2a-bfc7-1beba79cacd6.roa
File: 3cbd7d3b-f9f7-3d2a-bfc7-1beba79cacd6.roa (raw, json)
Hash identifier: us4TJDaOH/nTG2O0e7xun+o8arwVLlB1UFHhdp2dz3M=
Subject key identifier: A4:87:6D:21:D2:87:C3:74:AB:81:B0:CA:13:95:CA:46:18:45:BD:B1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FB8D6049A9495BD7F60060
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cbd7d3b-f9f7-3d2a-bfc7-1beba79cacd6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:8d:60:49:a9:49:5b:d7:f6:00:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=23bab918-40a9-4c31-9857-26bda7f4aad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:c2:c9:54:87:29:be:52:d0:7d:61:96:d8:
23:02:bb:28:54:11:fe:3a:0e:01:09:7d:43:93:6a:
9b:ba:8e:a9:5f:bd:d0:4c:0d:6d:f8:f1:96:09:06:
41:e7:10:7a:5f:d6:77:e3:50:e6:ce:4f:be:d3:4d:
07:57:f7:53:2b:af:cf:11:8d:48:a9:83:c2:d1:51:
a4:41:7d:2f:48:f7:ce:a7:67:de:eb:aa:4c:30:41:
ae:5b:46:9f:0a:7e:78:cf:11:08:0a:4f:42:9c:f1:
b4:fe:23:0b:07:4e:67:56:e3:54:95:63:83:9a:33:
cc:2d:6e:65:ef:8b:76:b5:36:d2:63:c1:bf:14:56:
19:f9:1d:16:7b:7b:b8:fd:86:a2:79:89:e1:5d:11:
58:a7:06:59:04:7e:11:09:b1:c0:99:d8:6d:87:1e:
14:02:6b:08:f8:cb:cc:5a:39:c4:a3:a5:35:44:b8:
8c:2d:e7:e4:45:c5:6a:7e:26:21:86:de:8e:92:87:
0a:e0:d5:29:8d:f7:0e:91:e5:b9:67:02:de:e4:3b:
ba:18:43:0c:60:07:0a:95:84:0a:6a:9a:29:93:38:
51:3d:ee:fb:35:4e:45:0d:0d:5f:42:4e:ce:0c:f5:
f2:f3:c3:05:12:15:71:f6:03:3a:43:02:82:c0:7f:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:87:6D:21:D2:87:C3:74:AB:81:B0:CA:13:95:CA:46:18:45:BD:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cbd7d3b-f9f7-3d2a-bfc7-1beba79cacd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:28:af:e2:76:88:c4:96:7f:b9:09:3b:0a:4a:42:6b:da:7b:
8b:03:9f:34:fe:a3:31:20:23:f3:6c:84:87:40:74:5c:3a:aa:
63:7c:23:d3:38:95:32:5b:f0:cd:fd:51:f5:63:a8:04:da:23:
11:b7:10:d3:b6:81:a9:69:a4:a9:2b:94:82:73:27:ab:c2:53:
3d:64:35:dc:66:8d:d1:03:d4:6b:a7:c4:17:29:32:6f:bb:a5:
94:70:af:85:fe:e1:fe:5f:54:6f:82:bc:16:e5:28:f7:e1:95:
9e:17:20:46:16:9a:35:97:d7:a1:b1:43:d0:6b:39:20:b8:fd:
af:e7:ae:40:6e:41:9b:71:6e:c9:8e:9f:15:db:44:43:ed:0e:
64:1e:23:1e:89:4c:6e:07:1e:41:25:b1:15:d7:37:72:35:d3:
f5:ff:45:f4:94:2a:5c:e5:7a:55:f9:8e:ed:fb:91:75:a7:7c:
71:32:b3:9f:75:50:0b:7c:9a:33:89:32:98:93:1e:4c:99:4b:
30:11:81:32:a7:44:a0:da:77:b6:27:db:6a:0a:79:42:b8:ac:
f6:c9:43:90:c3:d2:4a:c5:2b:04:d5:67:f6:9f:8d:3e:1a:3d:
a8:06:15:47:f3:e6:fb:de:31:06:2f:fe:af:3c:9a:6f:42:15:
ec:77:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:19:08 2025 by rpki-client