Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42f60c48-1b00-35f5-afb8-74c230fd5bef.roa
File: 42f60c48-1b00-35f5-afb8-74c230fd5bef.roa (raw, json)
Hash identifier: Ah5ZFjxo2sF3I5m+E1/d6dwU6PsF2fXKSNyYbCa19VY=
Subject key identifier: 90:14:2D:CC:F2:6E:AA:BC:22:BD:BC:FD:3F:54:51:99:99:97:06:DF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A065C7594E6B6B3236BB300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42f60c48-1b00-35f5-afb8-74c230fd5bef.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.72.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:5c:75:94:e6:b6:b3:23:6b:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=54de5478-5c24-4a95-8f2c-74f8cd9d3947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:2c:34:a0:e6:f4:ad:13:13:0b:28:48:83:
dc:8e:bc:1d:2f:41:3e:6e:fd:02:37:8b:03:e5:b8:
12:52:fb:d0:57:17:69:11:2c:4a:80:6b:e5:48:ad:
73:2c:0e:74:0e:b4:1d:5a:56:be:5b:41:7d:6b:db:
51:7e:fa:09:60:4c:4d:2c:30:ae:69:7c:17:32:62:
17:fb:8c:1c:03:ed:f4:5a:ff:be:1c:89:d9:0e:77:
18:89:fb:cf:52:05:e8:5a:ca:19:c6:ac:ba:62:2e:
2a:b9:18:63:f0:58:ab:88:0c:55:df:29:d2:7b:87:
78:ff:aa:00:38:0a:81:9d:93:af:1a:00:bb:87:3d:
0b:d1:24:67:42:96:c5:8f:77:9c:51:72:03:06:c7:
cf:fc:0b:ed:b0:e9:87:e4:1c:cd:60:92:06:50:0f:
5d:13:3a:98:47:8e:73:43:bb:32:cd:c2:d1:6c:3f:
a3:f5:3f:cb:23:2c:75:a2:df:29:19:4d:cc:66:9c:
23:06:38:cb:f6:e3:d6:f2:9c:fb:5c:f4:28:ae:2c:
58:76:60:61:f0:0b:4c:e1:64:ae:15:1d:06:19:c4:
65:09:89:eb:02:74:c4:25:47:0f:2e:b0:32:6b:8a:
fd:67:d8:10:8f:2d:f8:8c:14:44:b1:60:3a:6d:b5:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:14:2D:CC:F2:6E:AA:BC:22:BD:BC:FD:3F:54:51:99:99:97:06:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42f60c48-1b00-35f5-afb8-74c230fd5bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:95:a4:26:ce:1d:cc:9a:b3:1a:80:dd:84:81:e7:0d:ff:0e:
7d:24:d4:44:06:41:d6:c6:d9:9d:07:74:47:19:0a:83:a5:69:
5e:73:1f:45:41:c4:fc:5e:50:e5:04:dd:d7:71:4f:c4:82:b2:
39:5a:29:4c:73:2f:1e:7f:4f:9c:88:39:2d:d8:2e:91:08:4a:
02:b9:7f:dc:53:92:cb:07:77:5e:31:a2:63:64:c3:4e:61:5a:
8e:14:7f:91:df:33:b7:27:c7:91:2e:71:9b:3e:d8:da:e7:2c:
ee:f2:ba:a3:b4:5c:75:ec:57:00:60:b2:2b:b7:ba:e3:ae:22:
70:a6:e2:5b:cd:05:a8:db:5f:75:6a:23:f2:8e:b2:fc:76:17:
56:3b:f3:c6:6d:07:83:1f:8d:34:7b:be:5b:78:8a:72:15:51:
ef:72:59:d1:af:b1:fc:4c:22:e5:98:a1:35:3f:83:37:53:d8:
84:f9:ac:68:2c:5f:e4:dc:f1:31:f1:21:f3:70:71:f1:39:08:
31:fa:d8:48:69:e7:0b:7e:42:bb:2b:90:96:d8:b4:c6:48:a1:
25:e6:77:10:c9:cb:1d:8e:aa:01:e2:a4:3e:b5:41:80:1c:63:
84:73:3d:33:6c:d1:75:d4:15:d0:1c:98:e6:5c:26:24:66:98:
9a:98:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:32 2025 by rpki-client