Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b64e47b-90c4-3fc4-bd21-544a015f1adb.roa
File: 4b64e47b-90c4-3fc4-bd21-544a015f1adb.roa (raw, json)
Hash identifier: WlS+7nBOrtfMf6pQ3O2/sMAp+C8PuYu0lFJIZZhSNt8=
Subject key identifier: 7A:2D:E4:95:AA:0C:20:00:E6:CB:37:B2:28:A9:E7:CA:ED:95:A5:02
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1E203389495B1BE66711C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b64e47b-90c4-3fc4-bd21-544a015f1adb.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.85.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1e:20:33:89:49:5b:1b:e6:67:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7def0c1c-0d8c-434a-b66e-3d5e6ed36036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:fd:fd:57:af:0b:2e:2b:b0:ff:60:57:af:
fb:ba:c3:80:14:e2:0b:16:64:b7:ec:22:7a:56:20:
08:4f:cb:1a:50:ea:f7:4a:cd:20:c8:e5:91:21:3b:
0b:77:4a:7e:76:3e:76:c0:4a:ce:5e:7b:13:f5:3f:
c8:7f:b7:22:5d:b7:73:20:4f:df:cf:09:59:74:6f:
00:00:61:ea:91:d5:2c:81:62:a2:8e:ee:b1:5d:79:
3f:b4:f9:5f:12:c5:72:f4:94:9c:00:70:44:c5:33:
57:91:98:6d:ec:cc:67:8c:9b:5f:03:40:31:0a:8c:
eb:99:b1:13:7d:20:10:9a:cd:7e:d1:12:45:73:38:
b7:ed:78:24:38:0d:26:ea:01:24:68:11:9a:03:e2:
9b:33:53:c3:18:90:05:3d:0d:a7:70:11:42:e7:64:
df:92:e1:c2:2f:98:39:0e:bb:63:05:6b:ef:da:14:
ff:16:69:51:6a:d3:96:c4:72:69:d4:23:0b:4e:08:
8b:ed:49:4e:f0:71:65:0b:35:25:aa:a6:b3:02:62:
bf:59:49:45:20:a8:89:8b:98:a3:65:dc:2d:30:8e:
05:81:5d:a1:90:6a:02:b7:b3:c8:5a:7b:27:a6:6c:
f6:61:68:fb:8e:e5:88:97:d6:50:07:c4:51:0a:e1:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2D:E4:95:AA:0C:20:00:E6:CB:37:B2:28:A9:E7:CA:ED:95:A5:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b64e47b-90c4-3fc4-bd21-544a015f1adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.85.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f6:5a:e9:37:37:40:58:f6:62:54:c3:46:ae:52:13:24:75:
88:d0:f6:9a:9f:98:41:bd:1a:cf:c5:e7:e4:8e:fc:af:27:70:
3b:ec:ef:c4:bf:d6:ca:95:d8:9b:84:96:0e:b8:3e:68:80:f9:
9a:5a:f8:17:84:c0:9b:77:14:4b:fa:7b:8c:8f:ed:2e:dd:33:
78:d1:9e:c6:a1:7d:89:f2:56:4b:bd:31:1c:2d:a4:05:5f:df:
e6:0f:ff:4f:2b:b3:59:36:6c:4d:6f:90:b8:36:13:3a:e5:30:
1a:3a:8b:92:38:a6:c7:0b:23:59:18:54:39:34:b2:92:f0:55:
0d:82:3d:0a:31:28:02:33:15:96:5e:6c:39:64:a4:24:c4:bd:
8e:c7:4a:1f:77:c1:81:4b:7c:56:1b:75:e3:a8:b4:d5:d4:70:
9c:5f:f3:93:0b:0b:fb:74:e9:dc:30:94:6b:86:dd:ad:e5:99:
85:5f:16:5b:56:f0:a1:42:4b:a5:15:98:ce:82:02:bd:5a:59:
22:cf:9a:5a:e7:5e:33:ca:5d:b6:5f:8c:15:cd:1d:63:d3:1c:
2f:0a:27:b5:8c:c5:f2:5f:5e:ef:04:b1:37:40:f5:58:de:f5:
fd:1e:80:58:72:1a:df:67:37:45:95:21:ef:86:b8:5b:f7:08:
7b:0b:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:49 2025 by rpki-client