Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44330d18-9ca3-31e9-864a-6a5ac89af836.roa
File: 44330d18-9ca3-31e9-864a-6a5ac89af836.roa (raw, json)
Hash identifier: OCMrTxeQWoWRdATxal1IJJT2w7Otj3HuOmZLHCAsH5Y=
Subject key identifier: 61:90:7D:D1:3B:D9:82:7B:8D:9F:6E:C2:2A:76:49:CD:32:3A:95:8C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A27EE8E9A101351EB6946B0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44330d18-9ca3-31e9-864a-6a5ac89af836.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.121.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:ee:8e:9a:10:13:51:eb:69:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d022510b-5063-4563-a7b7-ae01f09834fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2d:e9:00:af:6b:f1:35:77:99:b4:62:31:84:
46:45:6b:ce:47:71:27:17:7b:b3:d2:4a:19:69:34:
8f:90:43:8a:55:69:20:f6:81:ec:7b:95:26:ff:0d:
50:f2:b2:74:70:6e:17:2c:2c:47:51:7a:a1:4d:e3:
70:e8:27:12:be:f4:e6:7c:10:82:e5:a8:c1:cc:67:
b6:58:8d:aa:2c:ba:5d:dc:7a:3d:83:70:87:e6:60:
e7:2e:c8:2f:92:d2:49:ad:1f:23:24:d9:b9:3d:1b:
6c:f5:68:4e:31:c3:2e:35:86:de:46:a5:cc:60:3e:
50:93:d2:52:3e:41:49:f3:af:c4:e9:ac:40:5f:ed:
50:e3:e1:36:15:85:84:23:90:f1:9b:62:94:6c:53:
9d:3f:28:e2:f9:58:9f:76:8c:f3:79:28:9a:1c:7e:
b3:5b:9e:f9:a4:6c:9e:90:09:97:e6:8a:25:f6:81:
42:16:46:1d:8c:5c:1e:95:64:12:71:95:c1:8e:5b:
21:93:d0:ca:06:a2:eb:ea:b9:1d:e2:49:7d:df:09:
8e:03:0c:3e:bb:ec:08:7e:18:36:89:ca:a7:60:97:
72:11:07:fe:9f:4b:03:b6:87:7b:14:4f:57:87:64:
71:b5:d4:f9:bf:a2:ab:33:bd:7d:34:7a:cf:e9:41:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:90:7D:D1:3B:D9:82:7B:8D:9F:6E:C2:2A:76:49:CD:32:3A:95:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44330d18-9ca3-31e9-864a-6a5ac89af836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.121.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:89:9c:1f:ad:f2:71:8b:ca:fd:52:56:92:08:59:28:61:c2:
26:b4:1a:bf:6f:d2:3d:32:1b:44:85:c0:be:1a:d3:12:89:c0:
e5:34:fe:7b:57:60:83:7b:cb:c7:4c:2f:12:7b:1a:f8:9c:d8:
a2:19:3b:af:a9:2d:74:db:6b:68:c6:c0:5f:d0:82:07:e9:84:
b1:52:94:cb:ac:be:12:bd:fa:40:c1:81:9e:1c:7e:45:30:b9:
bd:57:f5:de:a0:04:0e:6f:98:91:32:4f:ee:5b:4d:cc:c3:3d:
ae:20:2a:44:6f:75:54:c6:5b:5f:c4:7a:8c:b7:20:67:5f:5d:
e5:db:70:69:0c:44:cb:4d:28:9d:61:2b:49:08:47:e1:01:53:
e2:2a:15:02:bb:ff:3e:a8:00:f7:f4:25:4c:a3:e4:56:ad:fa:
58:78:81:fe:d1:b9:f2:32:bb:b7:bb:8d:41:71:7d:c4:06:bd:
27:bd:91:39:f1:ee:41:6d:b3:34:b5:4a:77:4e:66:1e:5c:01:
e1:8e:56:64:54:ee:b2:50:4e:2c:5d:9b:60:ea:ab:d0:c2:88:
ea:a0:d2:98:56:9b:bb:fd:91:83:1d:9d:23:c5:bf:46:b7:f6:
0b:04:bd:94:31:2e:e3:0c:02:4c:c6:b7:a2:ba:87:2a:59:ce:
4e:2a:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:46:21 2025 by rpki-client