Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/417fa8a0-46d9-3446-b715-a4eafd3ace5c.roa
File: 417fa8a0-46d9-3446-b715-a4eafd3ace5c.roa (raw, json)
Hash identifier: aIEMZSgoljF5l58cLxCX9lzfi5DZUhioS2BgKmPhdWE=
Subject key identifier: 61:9C:EE:79:B0:8C:CC:FE:E9:40:40:7B:80:99:AA:CC:21:E2:BB:A4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1A310968A12DD129F49D60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/417fa8a0-46d9-3446-b715-a4eafd3ace5c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.88.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1a:31:09:68:a1:2d:d1:29:f4:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f3fd2fea-3710-4068-b418-947d3aa89b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:d4:88:06:a2:05:5d:b6:02:62:d9:59:ea:
c9:95:eb:bf:da:b3:ab:9a:69:23:e4:79:82:b1:4e:
78:7f:44:cd:2e:30:a9:78:49:b2:c7:5a:1a:36:1b:
53:ed:73:d0:97:30:ae:76:3e:39:6a:13:f4:f9:e2:
3a:14:77:99:68:35:ad:db:70:31:19:cc:21:79:2f:
d2:2c:52:d6:c8:27:f9:1d:3a:57:bd:e8:a4:26:74:
b4:2f:47:0c:e1:3a:9c:b5:c0:3f:6a:dc:48:0d:48:
fb:65:e3:62:05:af:06:a9:72:7d:ba:8d:36:41:59:
14:a3:7b:0d:d4:20:be:3e:1f:12:97:e1:9d:06:c2:
d8:df:67:a8:b1:f7:10:ba:b2:f3:d4:ff:cd:cc:6d:
42:97:e7:3c:e9:37:6d:fd:32:47:f0:b5:84:8d:a2:
08:07:e3:76:1b:0e:af:87:b0:a8:e6:0b:e3:c9:b2:
3e:b6:95:3b:77:1f:4b:2f:ba:ea:cd:0c:de:df:96:
87:cf:8e:22:61:12:9f:c1:bb:a3:0e:ff:88:c5:e3:
eb:60:c6:f2:b8:9f:07:52:1f:67:76:fd:20:9f:7a:
d4:cc:19:8f:58:30:5c:d2:ca:dc:48:ce:69:a4:f7:
f9:8d:55:1e:db:f5:44:a8:10:fb:e2:67:55:c3:d0:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:EE:79:B0:8C:CC:FE:E9:40:40:7B:80:99:AA:CC:21:E2:BB:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/417fa8a0-46d9-3446-b715-a4eafd3ace5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.88.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:16:0c:a4:5b:77:c5:ca:f9:e7:27:88:c8:e7:de:11:b1:c3:
c6:8f:17:18:16:a9:c0:a6:9d:15:a9:bd:af:a4:17:6b:59:a7:
7a:1e:c4:0a:c1:76:87:b9:d1:d9:00:f1:fa:50:ee:bd:25:f8:
41:52:c7:20:28:89:9e:68:dd:5d:b1:a1:a9:ac:90:0f:c9:8d:
24:39:15:92:9b:ad:4f:1e:6f:51:40:e8:05:71:f4:59:97:a5:
fc:59:f6:5c:f2:c2:cf:d6:95:7d:5c:43:45:1d:e4:27:ed:eb:
de:e2:e3:06:24:f4:a4:4b:d4:b0:8f:d1:b1:f8:a4:1d:79:9c:
a4:27:dd:eb:7d:f9:e2:ca:17:dc:f2:6d:f7:ce:13:b2:9e:95:
ca:e4:fc:52:26:8f:79:d6:cb:e5:4c:1e:21:c5:c5:7b:03:da:
70:1d:0f:f2:fb:20:de:1e:60:59:9a:e3:4e:ce:f1:c8:bb:21:
f5:f0:d8:86:63:80:59:5b:7f:7e:c4:c4:39:42:8d:25:1c:f0:
23:bf:55:71:47:e6:80:52:a2:59:6f:d0:f6:c6:f2:23:a3:7f:
d9:a7:d4:6b:dc:c0:f7:bc:96:44:56:8d:ff:40:52:f0:e5:6a:
ac:6d:43:c5:18:fc:d4:d6:ab:dc:c4:f6:24:37:d7:d9:57:3d:
b9:e5:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:41 2025 by rpki-client