Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4da36d3d-b14c-34bd-a085-554015d4dedf.roa
File: 4da36d3d-b14c-34bd-a085-554015d4dedf.roa (raw, json)
Hash identifier: /9/VASdhnq7EPqkTYfZm+bQxPBtv5NEcfNXwxFhsPq0=
Subject key identifier: 5F:63:19:07:18:DD:20:84:E2:DF:40:4A:A2:0C:10:2E:EE:57:EF:CC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE85ACB8A8F2C28CDE6CE900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4da36d3d-b14c-34bd-a085-554015d4dedf.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Sun 29 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.155.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:85:ac:b8:a8:f2:c2:8c:de:6c:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Sep 29 04:00:00 2024 GMT
Subject: CN=81049b26-818e-431c-8d0d-b8b3cf862c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:f3:0f:90:87:41:99:46:fa:3e:23:23:46:
0e:65:44:42:39:f8:1b:ac:36:09:48:d7:e4:3d:e7:
e1:ee:4a:7e:a0:8e:18:5b:64:2b:b2:40:f5:9d:84:
16:0f:82:fd:5b:65:5b:e4:7b:14:9a:d1:29:0a:b0:
be:e3:04:be:08:84:43:39:74:8b:e7:e9:7f:35:4b:
03:93:cc:cb:a5:db:f7:e6:b1:03:72:e4:91:7d:ab:
1f:08:54:bf:19:a2:df:9c:b8:10:c5:51:af:94:27:
43:7e:66:e8:bb:65:c0:aa:16:16:7c:6b:c4:41:fd:
99:8e:0e:f2:75:46:54:62:02:ac:e2:50:a3:2e:99:
08:c1:a2:3a:9c:05:7b:50:31:a7:c4:34:c1:53:6c:
35:c0:88:9d:cd:29:17:ed:16:7b:07:f7:c7:c0:77:
12:c8:3d:5a:ec:24:51:8a:88:97:9b:8b:87:9b:e6:
77:f9:1d:76:65:5d:86:48:55:46:4e:2c:04:21:b8:
2d:b7:00:be:ba:05:bd:56:bd:57:1e:8b:4c:71:fa:
bd:e6:c8:9d:85:2f:d5:1b:c3:7e:ba:a5:73:88:45:
3a:41:01:c2:77:27:f2:f5:17:ae:03:40:8b:fe:58:
61:36:6e:4f:fb:52:aa:65:ea:9c:f4:a0:c4:36:14:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:19:07:18:DD:20:84:E2:DF:40:4A:A2:0C:10:2E:EE:57:EF:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4da36d3d-b14c-34bd-a085-554015d4dedf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.155.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:03:d6:04:20:a1:80:24:7f:82:a1:26:fa:fd:03:91:b7:85:
df:48:fa:c4:e6:54:10:67:c5:39:5b:32:57:36:27:8e:38:c7:
02:86:48:cf:01:e4:8e:e6:23:7f:4f:9d:d1:16:98:6c:cb:ef:
ce:83:b3:d6:a3:ec:97:9f:15:d6:2a:2a:f0:d1:0d:54:e0:c4:
34:01:5d:a3:0a:80:c1:0d:1d:a0:9c:c7:63:38:34:f7:87:07:
30:40:91:ba:c2:e1:68:c3:de:55:31:18:02:3a:82:71:46:da:
f3:88:ab:d5:f7:2b:73:6c:6c:b2:eb:43:99:50:26:c7:41:82:
f3:7e:62:9b:38:5f:59:16:58:71:74:ce:78:af:73:4e:ef:71:
76:94:a4:18:bf:db:ec:59:0e:3d:03:1c:46:78:90:ff:08:a4:
96:66:99:18:8b:c1:3d:28:e4:c5:20:d8:c6:94:39:d8:ec:d9:
a3:da:b5:d3:ae:38:28:02:45:a8:c9:59:c9:88:ff:29:12:5e:
d7:46:63:64:5c:4b:ec:26:6c:b5:d2:c8:9f:f8:46:7f:61:85:
77:3f:4a:99:7f:1d:21:22:78:ae:ca:f6:8c:c5:03:cd:f1:e5:
12:b9:e1:4e:62:0e:cc:2b:e0:7a:8d:b3:5e:00:05:b1:71:33:
71:a6:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:15 2025 by rpki-client