Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e0d662a-0e73-35a7-8bd1-1de8f8999869.roa
File: 4e0d662a-0e73-35a7-8bd1-1de8f8999869.roa (raw, json)
Hash identifier: k1brwQWpbX4p4I0YoUNA7ET2YprEFRyfYkrw0kqB8ys=
Subject key identifier: AA:28:A0:62:CA:9B:F8:11:93:76:1A:8A:39:F8:A1:B2:EA:A1:A1:E1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309ECF2B2A1B86FE656424C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e0d662a-0e73-35a7-8bd1-1de8f8999869.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.75.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:f2:b2:a1:b8:6f:e6:56:42:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=96865d1a-073d-4af5-9402-10950b63ad2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:98:1a:ee:ac:b4:13:13:2e:56:89:3a:a9:
d3:b5:c7:63:1c:ea:f5:50:8e:fc:7b:b7:05:c1:c4:
b4:22:6d:45:8e:41:a7:74:46:15:05:07:d1:1b:b3:
41:30:8e:7b:47:0d:d9:1d:ba:a4:12:36:a4:45:48:
34:17:0f:09:7c:51:81:ae:ff:f0:c6:1b:a7:b1:b6:
07:a4:e0:c1:39:71:fb:66:19:c5:55:65:bf:47:ce:
5a:10:10:5f:e9:da:e6:3e:e2:60:e0:08:36:58:2d:
cf:25:62:b0:c2:da:9a:66:b3:e8:20:19:9c:2a:0f:
50:36:db:ad:cc:3e:5d:67:4f:1e:e7:61:eb:a0:36:
db:c3:43:e5:34:0c:04:56:bd:96:5f:85:c6:6a:80:
51:25:b1:db:e7:7a:96:b3:31:dc:13:ce:0a:bd:5b:
4b:c1:0a:53:fb:6d:90:3a:e0:94:d3:3d:87:e7:c6:
f1:53:1e:96:43:f6:2c:df:70:a7:88:90:62:f4:1f:
44:ec:19:4c:70:ec:3f:35:22:0d:9e:db:61:61:aa:
19:80:c5:7c:44:08:a4:57:85:ca:d0:88:6c:2a:5c:
a0:2d:b0:12:02:1b:7c:cd:da:48:25:53:b3:04:3e:
e3:e6:77:9c:f9:ac:5c:e2:cd:96:73:e0:03:ba:70:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:28:A0:62:CA:9B:F8:11:93:76:1A:8A:39:F8:A1:B2:EA:A1:A1:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e0d662a-0e73-35a7-8bd1-1de8f8999869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.75.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:50:38:95:98:6b:1e:5a:bf:b9:34:23:35:3e:55:af:a0:e7:
29:18:71:81:d2:c7:6d:88:39:11:51:44:21:00:cd:5f:6c:91:
da:96:b2:e6:7d:4b:16:72:df:b7:e2:4e:86:51:09:26:95:4a:
a8:0f:ac:6b:11:04:7e:69:f9:09:70:bb:1d:f5:46:57:52:aa:
f4:53:db:41:f9:95:70:f5:59:5a:ae:cf:47:e0:d1:61:d0:f8:
7e:6f:79:af:e3:d0:6a:87:c9:8f:b6:0c:0f:41:e1:59:0b:3f:
15:7c:a6:47:28:11:3b:cd:3e:07:9b:26:01:1f:63:87:b3:54:
7d:e4:85:d0:1a:50:45:56:08:fd:ef:d8:ad:97:1f:0a:ea:cf:
26:49:26:0f:2d:71:ad:4f:69:83:fe:40:2b:6b:e4:3f:9f:0f:
32:60:35:83:07:cc:f1:ed:96:94:b0:55:3c:39:c2:e7:ca:22:
b3:f1:e0:4b:66:1d:f0:d7:42:bb:87:83:b4:3f:fe:2f:09:0b:
11:38:97:64:a8:4a:15:c2:2d:0a:56:bc:94:99:79:1a:5d:86:
d0:f1:8e:b1:9c:b6:04:89:fa:e7:84:08:37:a2:12:15:6d:67:
be:20:3c:54:44:8f:de:d9:8b:1e:56:b5:4e:30:22:38:a5:ea:
c5:b7:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:14:28 2025 by rpki-client