Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40763178-a990-38a6-be21-2afb5bf83b2c.roa
File: 40763178-a990-38a6-be21-2afb5bf83b2c.roa (raw, json)
Hash identifier: 5xZPv3+Sacg6v4q7AmNlSLXDHVgcp5KJCC7kct5iewc=
Subject key identifier: D7:81:F7:B1:44:A5:B3:3B:48:64:40:C0:CE:0B:73:AC:69:DF:9A:F9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F427BF5051E232A817C880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40763178-a990-38a6-be21-2afb5bf83b2c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.123.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:27:bf:50:51:e2:32:a8:17:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4e852aaf-7ef6-4d0d-a89a-04d68979365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:63:e3:c2:45:0f:ef:8c:e4:e5:74:2f:cc:
85:c1:5b:b6:68:0e:e3:68:25:78:d5:f6:c1:4f:8a:
44:1c:66:40:f4:26:e0:42:17:d1:5d:cd:a7:8a:34:
40:8c:34:a6:7d:67:7a:58:cd:a5:f9:4d:a3:18:49:
db:72:43:33:74:ab:ae:d6:ba:5f:3f:c0:63:2d:d6:
9a:62:9d:27:55:ac:39:9c:05:3f:19:4d:49:86:0c:
fa:fa:f1:db:ce:34:88:d4:ec:27:52:89:b1:64:64:
61:10:17:f0:9c:41:77:64:73:a6:33:e6:d7:6b:95:
4d:65:58:67:a3:e4:22:19:c9:95:3c:05:a3:62:f3:
32:df:03:39:e3:e6:3e:a5:4f:f2:ab:81:6a:e0:b5:
ca:2a:2e:f2:35:0e:db:a4:06:fc:85:03:9c:c4:51:
7e:7a:57:6b:5c:2c:a2:27:9c:90:d0:41:a5:46:30:
76:8b:05:b6:8d:82:6f:6e:65:c2:26:f6:a6:4e:be:
a2:29:22:9f:16:ce:be:fa:0a:e7:89:56:60:7a:05:
bd:97:53:11:cf:0a:ab:35:30:cc:c2:0b:fe:2c:11:
e9:e9:17:10:34:8b:bc:e9:70:e9:e3:2a:e2:88:df:
71:e9:2c:78:67:4b:2b:38:78:b6:3b:1c:4a:31:ed:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:81:F7:B1:44:A5:B3:3B:48:64:40:C0:CE:0B:73:AC:69:DF:9A:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40763178-a990-38a6-be21-2afb5bf83b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.123.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:41:a8:98:76:63:68:f2:12:0a:8c:30:7e:5e:c8:a6:3e:0f:
f0:00:d4:ee:0d:bf:0e:7a:c8:46:c9:08:f3:50:5b:ab:01:40:
0f:e4:76:21:ec:2c:ff:05:10:be:b5:5d:31:dd:c7:04:be:df:
d0:52:1b:f2:e7:c7:58:a1:ef:6e:47:33:d7:19:87:71:fa:eb:
8f:73:46:8a:c9:4e:48:0a:c3:b8:d2:73:a7:52:ec:f9:17:bb:
db:6f:d8:e4:f7:97:ea:59:74:c9:23:47:3d:07:2e:39:5a:3a:
96:58:1f:68:78:02:39:26:0a:13:c7:0a:9c:a1:3b:eb:83:f1:
c9:c5:6d:df:91:fe:58:f7:f9:50:5e:79:a7:59:3a:d5:fc:05:
b1:37:6e:98:d0:a4:a4:40:b0:d2:5d:10:0d:96:6e:4f:42:fb:
8c:c5:4e:93:74:c3:c2:a9:5c:fe:9b:1a:15:a5:0c:4a:2a:3d:
52:ac:3d:6e:b7:28:96:e2:25:f3:47:df:43:63:ed:9f:91:7c:
41:70:45:07:f8:83:d6:9e:89:1a:87:d0:5a:f8:9d:61:e0:4d:
72:e5:5a:08:24:fd:d2:7a:f4:71:5b:cd:9a:c2:fd:52:cd:37:
2e:84:16:fa:62:00:2b:7a:a3:c8:1e:5f:6d:1e:eb:2e:b4:7c:
76:9e:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:50 2025 by rpki-client