Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d43783d-18a5-317f-a587-2f3657ff35aa.roa
File: 3d43783d-18a5-317f-a587-2f3657ff35aa.roa (raw, json)
Hash identifier: WJKFUAT6O71Ew71adUNmvXFIhfJPqKlVTarPPEHHLvA=
Subject key identifier: 8A:BA:BE:10:FF:DD:AB:09:B7:03:D5:3E:A1:54:54:A0:9C:29:0C:3C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0EB0E467E94F7E2E9F3000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d43783d-18a5-317f-a587-2f3657ff35aa.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.146.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0e:b0:e4:67:e9:4f:7e:2e:9f:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c3ebb290-0088-4b5a-8cd0-816b34d6dcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:2c:99:2d:23:22:26:e1:98:b0:23:19:8f:
51:07:dc:92:83:7e:a7:48:cd:93:5a:5a:53:80:62:
b7:5d:3d:ec:de:f7:f9:ca:34:6b:22:b6:af:b5:ec:
2c:56:43:fa:12:c4:3f:96:9b:50:79:27:f2:57:a0:
50:61:1d:9b:e3:2c:de:b2:13:6c:c7:de:fb:f7:4b:
84:9c:83:ea:76:63:70:a0:cf:2f:cc:55:2a:32:fc:
65:ba:c2:40:22:d9:25:f4:98:7d:e4:6b:49:32:9c:
9d:19:37:4b:24:21:ac:d3:0d:85:07:fa:6a:ee:31:
0a:e2:d6:85:ce:e1:73:6d:4e:2b:46:60:ab:0f:82:
1e:0d:b4:bb:f5:8b:b1:4e:4c:ba:a3:c0:2c:3c:8a:
08:2d:9c:59:d2:4b:b7:b1:aa:9e:f3:6b:f6:bc:90:
f9:f3:56:8e:33:6c:b3:fc:0b:f8:7d:19:e5:d8:87:
86:13:ea:b9:b9:2e:81:61:20:a8:ee:e7:2c:c7:64:
a2:87:af:47:1d:5b:28:d2:5f:e7:3c:8d:db:56:e1:
3b:fa:a4:8b:88:0d:68:3b:50:33:f1:15:96:33:83:
97:ec:90:89:96:85:63:4f:52:f0:08:5f:23:00:4a:
67:3a:e5:cf:f0:d1:38:05:99:97:8c:33:18:f2:a6:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BA:BE:10:FF:DD:AB:09:B7:03:D5:3E:A1:54:54:A0:9C:29:0C:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d43783d-18a5-317f-a587-2f3657ff35aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:ce:8e:71:d8:b9:78:b3:98:49:7f:0f:b9:ce:5a:28:89:6c:
1a:7d:29:ba:6b:11:6c:8e:64:25:06:95:d0:70:df:64:e9:cc:
9b:e4:70:b1:f5:45:df:3f:86:1c:a4:40:f3:6d:ff:5a:a2:97:
a4:98:68:66:35:23:84:8f:de:bd:19:d3:c6:73:27:26:fc:cd:
d3:74:13:b1:6a:60:c6:bd:08:a1:6b:e6:0f:ab:c6:63:27:ad:
aa:73:30:8f:d8:ac:c5:86:12:4a:d7:65:94:36:66:6d:b3:96:
5c:0e:76:aa:4c:05:9b:b9:20:da:f8:48:4d:1d:4f:97:30:e5:
f0:55:eb:ae:3e:18:ff:6f:8b:34:c9:5a:6a:8b:39:c9:71:cb:
8c:94:50:60:e3:b5:21:ea:cb:b3:3f:0f:53:0c:21:b7:ca:45:
ce:7e:7b:5f:4b:6e:7c:e2:0e:99:80:be:e6:03:b7:65:ea:18:
65:e1:e5:f5:28:80:4e:f6:93:64:1a:cc:6a:be:2c:24:f1:05:
de:a2:8a:fb:20:46:1c:b6:6b:c7:65:3c:d4:f4:54:41:cd:00:
fd:88:fd:9f:60:50:a9:25:13:ac:f2:8f:41:85:69:ba:eb:48:
e2:90:e5:8c:96:02:28:dd:aa:47:33:de:d2:2d:0a:94:b1:09:
d9:fa:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:46:32 2025 by rpki-client