Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ac5fdc7-166a-39df-8205-7e2e85b08b33.roa
File: 4ac5fdc7-166a-39df-8205-7e2e85b08b33.roa (raw, json)
Hash identifier: so7PCyEDk9BIOgFgGweuGEPHpROTRKBIFgqEpDtZesI=
Subject key identifier: 4C:99:0D:46:73:D0:61:2D:21:25:61:3C:2C:F3:E0:B2:43:A9:B2:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583E25A6B424143B58EF829CD000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ac5fdc7-166a-39df-8205-7e2e85b08b33.roa
Signing time: Sun 05 Jun 2022 12:00:00 +0000
ROA not before: Sun 05 Jun 2022 12:00:00 +0000
ROA not after: Sat 07 Sep 2024 04:00:00 +0000
asID: 19527
IP address blocks: 34.3.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:25:a6:b4:24:14:3b:58:ef:82:9c:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 5 12:00:00 2022 GMT
Not After : Sep 7 04:00:00 2024 GMT
Subject: CN=8fa3b550-e0ef-4fb3-a682-0259423c3800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:81:9a:60:fb:ee:30:71:d9:24:ea:fe:2c:
f7:80:9c:60:77:23:a1:7d:18:e7:3c:fc:5f:d9:fa:
d1:21:90:4a:25:a5:4f:de:e1:d0:99:81:80:f3:ce:
d3:86:cb:8d:cb:91:1d:43:13:6c:dc:ff:e6:06:19:
cd:26:7b:31:50:c5:ee:97:ac:52:ce:e0:89:75:22:
40:04:c5:76:ef:4a:f8:13:92:e8:cb:7c:90:e1:db:
62:15:b0:9d:ed:a4:0c:d0:26:83:68:1b:66:40:ec:
05:1b:88:6c:cb:1b:84:1d:a7:c9:8d:bd:21:34:a3:
4b:c2:04:e3:8d:9a:3a:b1:27:f6:cf:5a:af:ee:bc:
e7:e6:ab:c7:06:b7:e3:2b:3f:7a:2d:19:37:45:1d:
39:c0:6e:99:20:08:fb:d9:8d:68:e0:2c:e3:ef:47:
8d:f4:5c:74:07:76:2b:1b:29:1c:ae:d8:52:12:82:
4f:0a:03:a8:d3:c5:b2:63:9e:1b:9d:82:ce:e3:62:
cf:04:6c:8f:50:3b:07:35:42:b6:b4:71:24:aa:dd:
1c:34:f3:3c:57:7a:2e:d8:f1:b1:89:e5:a2:c2:bc:
c3:6a:74:ed:fa:55:f4:2e:4b:25:28:96:22:cd:7d:
3f:3a:c2:ed:a9:b1:e9:47:53:b4:b9:ac:b6:c2:33:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:0D:46:73:D0:61:2D:21:25:61:3C:2C:F3:E0:B2:43:A9:B2:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ac5fdc7-166a-39df-8205-7e2e85b08b33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:2f:bd:ba:4c:a4:8b:97:ef:c0:e3:ee:0d:7c:2d:a4:c8:ec:
51:ac:f3:c1:1b:37:82:c3:c5:51:70:99:96:b5:22:6d:47:cc:
ae:47:9d:dd:43:ad:e2:f8:99:60:fe:ab:7b:be:fc:d6:35:fe:
63:79:41:db:a6:4d:2f:62:a9:32:44:c2:d6:0f:4f:9f:a2:13:
4a:6f:3f:ca:47:79:72:47:96:20:7a:5e:4c:bc:94:9e:a6:83:
1d:48:19:46:91:bd:3e:cc:4f:c5:c1:ed:6e:d5:16:75:e9:f7:
57:37:cd:a7:d1:02:f9:0f:a0:1f:08:ce:58:cb:50:54:b9:b3:
3e:74:50:c7:dc:c8:c9:1e:a7:e1:1d:ab:aa:cc:06:45:cf:bc:
a7:03:0f:77:61:77:a9:2f:e4:22:4e:b0:6e:13:4d:7d:c0:62:
f7:d8:33:1a:ab:21:a7:8c:f9:97:9d:93:ef:6e:5d:41:3d:81:
a8:eb:f6:58:e7:96:88:31:8b:51:86:19:26:5f:f0:f1:d1:8f:
6d:28:e3:19:66:d1:95:5a:3a:83:65:e9:df:de:36:b0:92:58:
7c:a3:9a:06:93:93:02:79:18:f9:92:22:53:f2:8d:0e:82:2b:
d2:b0:b0:23:f2:26:37:01:ff:b6:0c:af:47:31:57:01:d0:50:
2b:1b:a3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:19 2025 by rpki-client