Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/420e1e49-9810-36ae-a7c2-dbc79f8bc6f2.roa
File: 420e1e49-9810-36ae-a7c2-dbc79f8bc6f2.roa (raw, json)
Hash identifier: 7ooKJLI4hIHNtSUnCWR5ltB7m3YY/6u7q5b9yCOd7x0=
Subject key identifier: 96:10:FB:F6:4F:E1:C2:A2:6C:D4:31:C3:81:7B:F6:47:5C:3A:C6:09
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A073D9B632A2F76468F9D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/420e1e49-9810-36ae-a7c2-dbc79f8bc6f2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.84.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:3d:9b:63:2a:2f:76:46:8f:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1e9e932c-81b7-494f-ac66-31160b38ce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:b3:05:15:6b:09:ad:9b:fc:59:5e:80:3c:
6a:93:34:65:e5:1e:33:85:d8:53:cb:65:a9:c5:fd:
46:11:55:97:2f:2c:83:97:9f:67:21:c6:5d:ea:b7:
d3:cc:17:63:de:bd:a7:4d:00:39:54:cb:4d:09:33:
60:29:5f:52:80:1b:af:a1:db:79:b2:08:63:08:95:
61:79:e2:9f:3a:ef:a0:22:f9:e8:35:fc:50:7b:39:
13:0c:d7:8f:08:53:b4:c4:51:85:ba:95:8b:6a:f2:
a9:1d:b3:9c:da:2d:d5:d9:f8:59:df:2e:56:19:d1:
6e:a7:8d:81:c6:ab:95:99:2e:04:cf:9e:60:3f:e1:
29:27:02:1c:07:11:35:7b:5e:a1:46:f6:f1:5a:e7:
26:92:22:ab:ba:f8:75:b2:5b:ce:3a:01:dc:35:a7:
f9:bb:48:0c:66:0f:6b:31:0c:80:07:0c:03:a5:1b:
be:a5:db:18:0c:60:eb:5e:bb:1d:0b:43:34:61:f8:
54:1c:5e:14:7d:0a:4b:99:ee:3f:ed:9f:b4:31:48:
43:b8:89:7d:2a:6b:12:c6:9c:02:19:e3:6d:4b:98:
72:4e:a1:90:21:bd:d6:aa:9d:da:4c:85:fc:7a:63:
9f:7b:c0:71:93:ba:77:ee:e6:25:28:48:e0:29:c8:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:10:FB:F6:4F:E1:C2:A2:6C:D4:31:C3:81:7B:F6:47:5C:3A:C6:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/420e1e49-9810-36ae-a7c2-dbc79f8bc6f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.84.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:f6:13:0a:dd:31:39:43:a4:81:71:26:a6:10:b3:17:a5:8c:
ae:13:24:52:b4:28:8e:ac:c6:d4:4b:e1:fd:da:dd:58:ec:5f:
00:94:d2:0a:b9:c9:8c:ee:10:62:8e:cc:f7:a8:90:73:09:c8:
a8:cc:01:fd:b6:1f:e4:a5:fe:cd:b7:17:90:4a:ba:83:27:00:
80:0f:bb:0b:bb:af:9d:01:7e:2a:8f:cb:0c:e6:05:f7:30:38:
94:03:9b:14:b5:dc:86:43:8a:c1:5e:7b:cf:f4:cf:0c:32:3f:
1e:63:15:d3:a2:8c:4f:35:70:10:a3:3f:4c:99:66:fb:47:2b:
7d:ae:2a:16:c3:20:34:e0:41:8d:cd:6f:9e:b3:06:00:10:60:
5a:d6:e7:95:c0:39:3d:d5:31:b0:68:e0:bc:ba:a3:27:54:76:
cb:af:e8:c0:4f:a0:81:98:c8:d4:43:40:b2:38:9b:17:6b:33:
0a:d6:0c:32:dd:36:af:30:eb:17:84:8d:75:b7:3e:4b:87:b5:
1c:bb:ac:ca:3b:ef:10:82:ca:ac:c0:75:b9:54:04:a6:05:d2:
63:bd:df:84:8b:01:4c:6f:69:e6:ed:9e:e6:ef:58:9e:d8:be:
cd:bf:6c:54:ff:b3:96:33:30:9f:bf:9e:a2:40:00:db:0d:c4:
c6:f5:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:17 2025 by rpki-client