Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d985cd7-4ccc-3dff-837c-26a2a963d64e.roa
File: 4d985cd7-4ccc-3dff-837c-26a2a963d64e.roa (raw, json)
Hash identifier: OMeS22PEdp/99WzNcS+jOC/Dpus3m1KLom7dEFXYiPA=
Subject key identifier: A9:15:2A:31:33:37:D2:C8:BB:8A:AF:8F:45:0B:64:14:09:02:C7:B6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0F3CECFE10AFED4B4C2C40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d985cd7-4ccc-3dff-837c-26a2a963d64e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.139.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:3c:ec:fe:10:af:ed:4b:4c:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=43d99e7d-caef-4d0b-98da-843e972ef6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:07:7f:da:06:53:3b:11:57:ea:50:2a:a5:
06:45:a8:ad:0c:05:30:d5:3c:98:a7:97:9b:25:a2:
f1:83:eb:65:19:f9:dd:f8:61:46:19:69:3f:57:06:
b0:87:2e:4b:07:22:40:e8:be:4e:f8:e1:84:28:05:
bc:81:e1:8b:55:f7:ab:4f:54:99:48:cc:aa:23:2f:
bc:dd:3c:e6:19:30:14:24:e9:8c:47:80:57:22:65:
d8:e0:c1:9e:80:f9:f3:8e:32:6e:57:97:0e:f4:de:
7c:1a:52:0c:68:ec:65:b7:2a:34:bf:d4:13:67:0c:
bf:8c:c0:0b:5b:dc:8a:37:ab:2e:ec:81:33:da:a2:
c0:f1:5f:bf:4a:c5:2b:1e:28:ec:22:ea:6f:59:ab:
78:5d:1f:95:0f:c7:19:f6:90:ba:9c:63:10:a5:69:
36:dd:e1:0a:d5:74:66:d5:79:58:22:51:e4:79:e1:
1d:fe:27:a6:be:98:3d:36:46:fe:4c:ad:bb:e9:24:
a4:2b:37:28:bc:eb:ca:3a:ba:1c:a0:5f:2e:40:1e:
79:e0:76:2c:53:ff:ca:36:e6:be:8f:d4:6e:3e:a3:
9c:23:8e:fb:36:15:b1:78:f3:72:39:e9:05:9a:2b:
28:40:a2:dc:8e:67:03:eb:5d:6b:0b:93:00:a5:6f:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:15:2A:31:33:37:D2:C8:BB:8A:AF:8F:45:0B:64:14:09:02:C7:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d985cd7-4ccc-3dff-837c-26a2a963d64e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.139.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:15:56:5e:ec:59:21:3f:99:86:89:54:d9:1f:ef:a9:ad:fd:
52:11:76:22:8a:d4:59:67:35:ba:51:fb:7d:cc:0b:55:72:68:
7b:80:9b:67:63:f3:04:21:3d:ed:39:05:b8:d7:59:7d:2e:55:
37:4d:7c:5e:5b:5f:75:35:4a:23:8b:60:02:e8:9e:67:09:5c:
38:7a:dc:19:04:df:e9:29:7e:23:b3:ca:b9:71:92:0b:73:41:
19:8b:4f:38:e3:e8:66:11:b6:f8:d9:36:ae:4a:fd:c5:d8:f8:
4c:01:ff:a7:30:a2:92:31:36:e4:ab:ce:2e:ad:21:45:aa:5c:
b4:48:ff:9f:ae:7a:5f:cb:e8:5a:bb:d8:af:03:c4:12:a8:fe:
3c:bc:2c:e8:0d:d2:41:e6:30:2f:ab:5d:7a:d5:d0:5e:5c:10:
4e:46:48:80:f5:d8:ec:95:23:71:b8:3b:9e:4d:27:cf:71:66:
aa:df:1c:f7:24:b4:a9:1d:7e:08:42:a0:98:7e:ac:22:d9:c0:
07:6d:1f:e0:80:5e:f1:7a:93:cd:2d:4d:3d:ba:ba:76:fc:6a:
d2:83:e2:7d:93:89:34:a1:4c:18:5d:86:6f:4a:54:08:bc:a5:
33:13:61:82:98:d2:b3:5c:e1:1c:e8:f5:5f:74:7e:69:05:e8:
80:a1:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:13 2025 by rpki-client