Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e0c5185-2723-3f3e-9a23-551d3df59ad8.roa
File: 4e0c5185-2723-3f3e-9a23-551d3df59ad8.roa (raw, json)
Hash identifier: Gh4Po1fK1ZVs8J44eN4O+fkGBThTPLZa1IKzlOkl0Z8=
Subject key identifier: 8C:66:CC:CC:C3:19:B0:AE:FB:A4:34:B9:28:8F:7A:13:BA:5D:77:65
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583D3C8AC98C4270A7AE2319EF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e0c5185-2723-3f3e-9a23-551d3df59ad8.roa
Signing time: Mon 14 Mar 2022 04:00:00 +0000
ROA not before: Mon 14 Mar 2022 04:00:00 +0000
ROA not after: Sat 15 Jun 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.64.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3c:8a:c9:8c:42:70:a7:ae:23:19:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 14 04:00:00 2022 GMT
Not After : Jun 15 04:00:00 2024 GMT
Subject: CN=3529ce58-9cd0-4543-9d60-c1c8b2af3cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:db:e9:38:82:bf:8d:6c:b7:42:44:fc:e7:
9c:a3:1a:12:cf:ec:e3:fc:fd:58:09:15:e2:33:c5:
3a:81:2c:d5:c8:2f:a9:88:72:2b:5f:2e:e6:59:fb:
10:bb:cf:4b:f0:c8:ef:d6:12:af:01:7f:c1:ec:18:
96:42:7d:d2:cb:78:64:73:46:a2:9c:4e:99:4b:19:
74:4a:e1:5b:94:b0:4b:f1:7b:84:fc:4c:7e:d9:08:
18:38:b9:3e:68:23:c7:ca:86:49:23:6e:fa:a4:6e:
fb:37:be:00:53:13:ed:83:0c:c0:4f:90:77:c8:45:
0f:f4:f3:c8:e6:57:e8:74:58:e7:50:20:2b:9a:9e:
44:3c:7f:cb:d0:ea:01:bf:49:8c:0c:81:30:70:20:
ac:aa:8b:36:ce:db:83:8c:63:82:68:b7:8c:07:87:
06:5d:94:6d:53:1e:e6:15:d7:dd:89:6a:a7:0a:f9:
01:c4:e9:44:03:cf:cd:94:62:d2:96:d9:3a:58:8e:
cf:83:5d:7d:ad:f3:44:9d:16:dd:d2:4f:c9:76:34:
5d:41:38:c5:28:85:75:16:d6:48:a0:ce:b5:e7:10:
42:d9:01:8e:f3:5f:b2:5b:f3:cf:bf:22:52:e8:8f:
4b:df:5c:1d:31:1f:c4:fa:fa:fd:2f:62:a2:61:b1:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:66:CC:CC:C3:19:B0:AE:FB:A4:34:B9:28:8F:7A:13:BA:5D:77:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e0c5185-2723-3f3e-9a23-551d3df59ad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.64.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:2d:cc:df:5c:53:37:33:3d:e2:82:86:0e:5a:e6:bf:36:66:
a7:eb:ce:44:86:da:83:a5:6e:37:53:6f:91:39:00:0a:b3:38:
39:25:66:72:ee:0a:51:1b:f9:63:fa:79:62:46:47:0e:81:4d:
86:59:85:e8:58:62:bc:c3:f4:35:c4:91:83:79:d4:63:e7:da:
51:21:d3:bd:1a:d7:da:42:ed:39:35:d7:d9:b5:34:79:34:0c:
bd:a8:30:26:e3:9c:8e:ae:13:b7:00:c2:20:36:f2:1f:aa:f4:
7b:4a:2b:96:0b:e6:c1:7a:0e:59:06:e3:fd:49:e2:62:d1:f6:
98:7e:ef:ff:c0:c8:8f:c5:7e:d7:15:45:36:b9:54:be:94:b3:
58:88:7f:d4:07:a9:75:44:82:b3:e8:60:2a:0d:76:1e:0a:9a:
24:79:ac:03:95:a7:b8:a9:33:89:e7:7d:41:ae:0a:ee:7d:94:
e1:61:34:3c:26:0a:ee:87:b4:45:c7:f9:3f:df:7d:97:f6:1d:
ab:e0:8e:9e:af:bd:43:a6:6b:e4:be:8d:a1:cf:b4:bb:95:79:
47:70:5d:80:ba:8a:33:f1:52:27:7e:6a:f0:fe:b1:3c:4a:24:
36:65:21:29:d7:ab:ae:73:26:f4:3a:21:67:4b:f0:51:5c:05:
b0:f4:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:23:06 2025 by rpki-client