Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/425110e4-b39c-38a7-bdfd-c3f1a02f1b33.roa
File: 425110e4-b39c-38a7-bdfd-c3f1a02f1b33.roa (raw, json)
Hash identifier: ZON+gaUkls5/uYVLu6iachy7Pz51z/5Yp1OVlWac7B4=
Subject key identifier: 10:7B:BC:6D:47:C3:61:16:52:00:C0:E0:5A:49:B0:C3:CA:42:DF:DF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F52C76C9FEB83ADA1FC480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/425110e4-b39c-38a7-bdfd-c3f1a02f1b33.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.126.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f5:2c:76:c9:fe:b8:3a:da:1f:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=dca87c51-e682-454b-a58d-1d74bd6dc9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:7f:b0:a5:d8:06:17:3e:48:12:09:99:ce:
d3:d8:98:6d:19:59:59:fd:49:b0:82:30:08:09:4e:
1e:d9:f6:d1:ee:ff:1c:71:b3:a0:5b:32:65:fe:14:
a4:c9:a2:6b:0e:22:db:12:7d:52:b9:48:8f:49:e3:
b0:d9:fa:54:b4:8f:bc:f4:84:d3:fc:bb:c9:d2:4b:
81:c3:02:c3:41:b6:37:80:c2:8b:7e:63:48:6c:78:
2e:81:01:e0:f7:d6:95:fc:3b:3c:43:31:00:1f:fe:
2d:47:b3:c6:cc:f0:75:5d:15:e8:b6:65:48:1f:dc:
a3:47:c5:29:c5:26:0f:b0:e2:9c:74:4f:13:2a:f9:
af:8e:cd:2b:59:65:ed:df:8b:5e:ef:54:66:2d:56:
3f:ee:23:7d:b5:7e:02:40:1c:4d:95:b4:bb:b6:e5:
39:0e:6c:e1:80:d5:56:f2:98:49:8b:da:5f:8b:f0:
c0:fa:c6:52:8d:56:6a:da:fb:7a:cb:38:3c:c7:3a:
d9:d8:87:80:67:30:c2:9e:d1:6b:ca:a4:27:4e:c2:
ce:95:e6:fb:9e:5d:99:54:67:7d:1f:3a:aa:af:30:
25:a3:29:fd:71:20:26:2c:81:9a:63:d8:b6:47:18:
dd:39:b2:14:ea:07:fb:9d:7d:b9:b2:09:23:be:0b:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:BC:6D:47:C3:61:16:52:00:C0:E0:5A:49:B0:C3:CA:42:DF:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/425110e4-b39c-38a7-bdfd-c3f1a02f1b33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.126.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:33:38:24:2a:c7:d2:a9:bf:a6:88:0b:23:05:34:bc:82:f2:
2d:7f:e9:a3:7c:27:d7:52:0d:4b:dc:0f:f1:92:7a:98:03:9f:
57:28:0c:f6:32:80:78:52:29:9f:e3:91:11:15:9b:a0:8f:34:
11:fa:54:7d:23:04:08:ed:d4:d5:36:ce:50:39:ca:c1:11:c2:
df:34:f7:51:a3:81:63:29:bb:7c:60:bb:3c:db:e9:38:2e:fa:
7b:43:16:28:c4:db:b7:a0:62:8a:f1:0f:1b:96:65:9a:c5:c0:
51:7b:a7:e6:f5:04:89:09:75:aa:b1:6f:22:f3:b0:5b:4b:a9:
15:a1:2c:30:ed:e4:41:64:d1:22:05:36:10:b8:52:22:c4:d6:
3a:a6:23:a0:88:0f:27:9d:9a:f1:d7:c0:91:6a:49:82:24:ca:
25:a5:35:41:9e:ba:71:6f:e5:40:a8:fa:4b:27:c3:a5:e2:c9:
7c:c3:a2:0f:ee:ad:be:b9:d2:26:86:3f:cf:56:91:90:7e:bc:
26:00:64:3c:a8:54:01:3c:08:19:42:63:ea:63:e7:34:57:af:
f2:4d:62:24:de:d3:dc:02:7e:24:e4:e4:5a:65:69:3f:85:c4:
90:b1:5a:3c:58:70:17:5c:2d:77:a5:a7:2e:b0:ac:a7:af:cb:
17:f0:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:41:43 2025 by rpki-client