Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dcf0b4d-88c2-3076-829b-f880d5559d19.roa
File: 3dcf0b4d-88c2-3076-829b-f880d5559d19.roa (raw, json)
Hash identifier: rmd45ZiTNApwWJU16Kl7nCyaDjnoQurQXadyHB7L2Pc=
Subject key identifier: E8:3A:CA:97:C4:61:80:5E:BC:14:18:87:00:12:F0:23:11:BF:E6:A9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A510754F4A065FA2BD600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dcf0b4d-88c2-3076-829b-f880d5559d19.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.64.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:51:07:54:f4:a0:65:fa:2b:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=c4a228c0-58c3-4e18-8b80-b01a68b7fe97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:2a:57:1b:25:26:17:73:6a:6f:a6:4b:fc:
95:c6:14:5f:e4:60:36:d7:9f:be:be:91:16:c9:99:
39:57:79:b1:24:f6:91:ca:3e:64:1d:4f:24:04:87:
01:9d:c3:be:ed:0a:e3:61:44:c2:f7:37:25:81:a6:
03:84:2c:de:48:21:d4:91:15:4e:2e:05:45:63:fa:
68:f6:af:e7:a5:db:15:60:e2:ab:b3:9c:1a:d7:84:
66:3d:87:da:ca:50:9c:16:9e:af:5e:6d:03:18:16:
46:6f:9d:ca:65:7b:9e:56:a2:73:e1:51:ad:19:29:
a2:02:41:28:f2:6d:25:38:57:b6:ae:49:c5:4f:dc:
aa:38:d0:b7:2d:7d:06:55:b7:cd:d5:cb:e5:b2:ff:
23:78:94:5c:bc:4f:75:3d:f8:0e:b8:a0:4c:48:c2:
77:27:d9:7b:9c:81:c6:af:b8:0c:8f:60:83:f0:16:
f4:c8:d9:7d:3d:11:e0:40:a6:4d:8b:cb:ce:49:88:
fe:eb:8d:47:4e:4b:96:57:33:09:4c:5a:38:bf:24:
a9:27:58:a5:e8:53:26:d3:2b:07:5c:42:20:ed:f1:
2a:60:8a:69:7e:2f:f4:14:8e:15:33:8f:f1:ba:d1:
fa:85:1f:6d:1e:7f:50:7a:2c:1f:5b:43:9a:84:55:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:CA:97:C4:61:80:5E:BC:14:18:87:00:12:F0:23:11:BF:E6:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dcf0b4d-88c2-3076-829b-f880d5559d19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.64.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:f0:8f:77:94:a1:1c:0f:47:94:1e:83:be:0f:30:46:45:03:
08:8d:12:46:30:13:1e:11:d5:41:cc:d2:14:c1:ca:60:7b:b9:
92:94:55:7b:3b:cf:0a:62:92:47:fb:c9:36:22:ff:83:07:84:
00:d2:4d:37:48:11:24:b2:78:79:ed:d0:f4:24:a4:28:30:27:
00:43:f3:a2:77:d5:8a:64:95:00:4c:68:f5:2c:79:53:6e:7b:
88:a7:d9:09:39:26:73:d1:7b:b1:8e:09:12:7a:e8:2c:2c:a5:
c3:93:27:13:48:7a:1a:4b:19:27:5c:a8:1a:16:1d:a0:5e:3c:
ff:2c:ad:4e:c6:10:be:8c:92:f1:91:09:c0:c4:ab:3a:af:9d:
cd:80:34:97:35:e4:91:b6:95:05:69:1c:e6:ba:52:ad:dc:a4:
66:09:be:8a:cb:75:e4:10:62:3b:20:6f:3d:5f:bd:b0:24:bb:
c1:c5:9f:8c:ba:b9:ee:f0:1b:66:21:45:bf:63:0e:17:fb:0a:
f4:0e:ce:c6:5a:a4:e7:5d:1d:1a:7e:01:62:c3:9a:6b:bc:ec:
cc:2a:2f:97:aa:73:c5:16:cf:80:59:9d:66:f4:01:4f:58:90:
cd:69:62:92:6a:a8:34:f7:d0:3d:cc:32:35:93:88:07:72:e1:
5e:18:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:36:12 2025 by rpki-client