Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b0553a5-4dba-356b-be15-8ddd889a4cfe.roa
File: 4b0553a5-4dba-356b-be15-8ddd889a4cfe.roa (raw, json)
Hash identifier: ukS0859VDWmEKh1EM7CJPrspwYZTg/cBe5FPX+H7y4Q=
Subject key identifier: 07:57:B6:98:31:58:BA:53:0C:BE:A8:5F:BC:DD:57:7C:C5:F3:7B:9C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F59EE2AF0A3CFBD58B1500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b0553a5-4dba-356b-be15-8ddd889a4cfe.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.150.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f5:9e:e2:af:0a:3c:fb:d5:8b:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c2e3bcd7-57df-4c0e-a8aa-3d46d45a189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:45:7a:be:3c:c7:d3:ff:ce:b7:5a:b6:c8:
da:54:02:ba:2c:46:0e:cf:cc:a0:39:93:3a:d4:8a:
c4:02:4e:c3:38:c9:b6:af:68:b6:af:93:eb:6c:0b:
3a:90:80:e3:ac:7f:8e:17:c8:b1:da:68:1f:db:97:
64:7a:9e:c5:00:47:84:63:b8:76:1f:24:66:e0:26:
f2:b9:99:6c:94:6a:09:b2:90:93:3b:0b:a4:f5:02:
77:c5:51:29:84:70:f1:1a:0d:b0:58:aa:c9:c2:20:
41:33:16:c9:5d:e3:e5:6f:8d:d5:31:c4:e2:44:9b:
43:30:7b:89:f5:41:3d:0e:f7:d3:3f:76:52:a8:98:
92:c0:6f:f7:e2:44:45:2c:36:3c:05:cb:83:03:d1:
e1:17:70:79:51:b1:48:eb:33:29:8f:4c:95:21:f2:
69:09:71:3b:ba:1a:1f:ed:d0:11:a8:14:9f:51:4f:
e7:ba:b9:ac:38:b0:04:41:13:0c:2d:78:d7:ab:4b:
cb:25:46:9f:3b:98:92:59:d4:d4:5b:71:c1:90:40:
f1:14:00:66:41:92:da:b5:64:06:c1:9b:3e:f4:d0:
80:22:02:6c:c2:00:ab:f7:0d:58:15:fe:dc:92:40:
cc:d1:f2:e1:23:b8:ed:f2:04:dc:9a:5b:16:9e:63:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:B6:98:31:58:BA:53:0C:BE:A8:5F:BC:DD:57:7C:C5:F3:7B:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b0553a5-4dba-356b-be15-8ddd889a4cfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.150.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:d0:b0:5d:e5:ec:55:ee:91:b8:0c:54:d8:2e:e3:e5:49:f4:
4c:c3:76:43:e9:94:41:4f:e4:7e:5a:1a:09:18:61:98:8f:dd:
32:4a:78:86:c1:cb:66:3b:e3:d6:ec:22:1d:75:cf:07:38:b8:
f2:bf:ac:b6:0b:fe:ee:7d:25:8c:43:2c:26:7b:e5:9f:b6:80:
28:22:57:5f:37:2b:68:e6:69:ea:94:27:0b:8e:c4:9b:85:b6:
4d:dc:fa:6f:5d:41:11:72:9c:ef:d6:67:6f:45:86:70:39:80:
32:b9:3e:c2:69:57:b0:a7:74:98:3f:db:1f:13:a9:5a:d2:05:
44:d0:91:9f:15:87:e6:c7:c8:70:8f:2e:15:da:f8:ce:79:e2:
e5:a2:29:ba:4a:0d:04:04:e9:e6:c4:37:18:f5:e7:48:2c:ae:
cf:36:69:18:89:86:07:12:d2:54:f3:93:64:31:0b:cf:b8:78:
c1:20:60:18:07:0c:27:7d:65:a3:37:fb:4d:ff:45:70:f3:6d:
00:5c:33:91:a0:16:b2:bf:a6:79:cc:4b:74:bd:57:3c:9c:f4:
65:3b:92:73:54:65:53:7d:c6:9c:bc:3d:ef:f2:41:5a:39:dc:
f5:ae:08:c3:e3:d1:ed:36:22:f8:bc:4d:ad:70:55:b9:f6:ec:
41:bd:f6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:36:48 2025 by rpki-client