Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d27a60a-e885-3635-b825-10c36db0c868.roa
File: 3d27a60a-e885-3635-b825-10c36db0c868.roa (raw, json)
Hash identifier: d6ogzvq6jrnAPl13TOD/L32biLtEy8F4kqfpDt6jBTk=
Subject key identifier: A1:63:CD:F7:E2:A8:F4:25:E3:E6:AF:4B:AC:CB:4C:61:47:9D:21:1D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A26E1B3D9DB15608EEED980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d27a60a-e885-3635-b825-10c36db0c868.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.76.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:e1:b3:d9:db:15:60:8e:ee:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=21419cf7-3048-47ef-a88a-3f55f790a456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:1a:9a:75:a5:29:89:7c:08:34:49:49:9e:
c5:51:2c:b6:ed:0a:73:50:d5:2d:33:fb:d1:36:cb:
20:73:61:49:06:b8:90:a8:d0:af:18:ae:3d:58:4b:
7b:54:04:b0:0d:58:66:30:e4:4c:05:b6:fc:96:7a:
2a:52:67:fc:de:3d:a8:cc:66:b5:d7:55:f2:0a:d6:
e1:17:36:33:16:33:d3:dc:ed:03:b1:a6:c3:43:2c:
14:1a:9f:2c:d3:f6:68:18:80:c5:7b:59:3a:a8:39:
10:fe:4b:c5:45:18:7a:8b:1c:a0:07:79:78:25:dd:
5f:df:01:e6:fa:7e:e7:eb:17:98:a7:a4:83:df:0e:
46:4b:83:37:d8:81:f5:94:d9:da:8c:e5:9a:d5:4f:
53:76:59:65:57:9f:87:01:c6:71:b0:fa:d6:79:bd:
0c:7b:cc:f7:2d:67:fe:44:c4:1f:bc:84:a3:f6:69:
0b:ae:b8:14:30:80:73:c0:d9:9e:e6:0a:7f:fd:1a:
44:50:45:ac:c9:dc:95:95:34:c2:98:c0:17:c3:96:
2e:9b:ee:36:fc:d3:c9:70:7e:76:f9:11:80:36:7c:
bf:67:36:78:db:0c:7d:17:a4:d0:2a:e6:14:bb:b8:
45:89:77:62:54:40:a3:31:e2:e7:12:11:d2:56:dc:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:63:CD:F7:E2:A8:F4:25:E3:E6:AF:4B:AC:CB:4C:61:47:9D:21:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d27a60a-e885-3635-b825-10c36db0c868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.76.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:e3:fa:16:a1:28:ef:ef:2c:9a:98:6b:d0:e2:ff:fa:91:40:
7b:2d:24:48:91:b5:af:b6:73:21:cd:67:57:f0:88:9a:47:b4:
72:1d:bc:72:3c:67:a7:8e:47:46:3e:ca:cf:e8:1b:8d:59:61:
9a:d6:09:16:96:33:7f:3c:7e:a3:ba:6e:7b:2a:cc:0a:6c:15:
c4:6a:b5:7a:e2:06:f0:81:95:78:86:1a:96:2e:f4:86:0e:01:
66:02:89:2e:61:16:28:cc:64:42:86:bc:3b:a8:d7:61:33:fe:
79:18:4e:a8:95:41:dc:a8:b1:af:d0:3f:80:12:66:c7:50:35:
5a:1b:05:aa:42:32:fe:92:65:50:5c:77:95:e9:2a:59:18:76:
c9:d3:4f:81:9c:2e:57:0a:07:88:0d:ef:c7:a5:50:99:94:dc:
c7:0d:ef:5c:a5:a7:94:2b:bb:ab:eb:5f:a1:6d:dc:ea:cd:77:
73:29:04:3b:85:ae:24:9c:39:d0:a2:58:e1:54:d6:0c:04:28:
28:97:37:08:33:5b:95:39:36:fa:e4:05:1a:ba:2c:d0:fb:ae:
ae:09:ce:20:b0:0b:a7:74:33:d1:d7:fa:18:ac:85:91:b7:fd:
81:c6:d0:02:b8:f4:d4:69:98:e5:19:1c:c5:25:04:50:0e:41:
19:d1:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:33 2025 by rpki-client