Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e900bb0-de70-3011-ba64-ed6f585ef626.roa
File: 4e900bb0-de70-3011-ba64-ed6f585ef626.roa (raw, json)
Hash identifier: XGFD2fRqxcZDlaXQp5U9v4cbxcRRexhp0wbO4+3S2SI=
Subject key identifier: 27:EE:A0:D3:31:8B:0B:24:01:08:06:C1:6E:BB:56:C0:CA:8D:84:8B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F1E1BCF6E07AB9CC30B520
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e900bb0-de70-3011-ba64-ed6f585ef626.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.123.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f1:e1:bc:f6:e0:7a:b9:cc:30:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5cff66d7-f4a9-448d-aa8a-1b60d9593f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:14:75:d6:42:a1:cb:81:11:47:41:4e:06:
c0:e0:7d:06:df:34:52:d0:0b:60:8c:34:44:f9:0f:
e0:cb:94:58:e0:6c:e1:b4:25:bb:38:f0:8b:e6:57:
20:40:40:da:eb:00:f2:89:30:87:ea:fb:7e:30:54:
4a:1b:17:fb:5a:a0:f8:1c:50:37:46:6f:dc:fb:ac:
a3:66:2f:3f:33:56:97:fc:26:ac:7f:98:0a:1f:e1:
b3:a8:da:35:75:10:7c:1f:e6:45:02:f4:d7:91:24:
79:99:2c:36:10:ff:f2:fa:0e:ae:5b:04:6c:e1:6c:
8a:c9:9d:f7:ba:c6:6b:51:d5:56:c3:34:5b:7c:92:
f6:7b:65:62:88:71:f2:51:d5:fe:4b:fd:87:76:b1:
9e:7b:01:6c:fa:70:83:d0:2e:aa:89:13:5c:2a:e2:
68:a8:8d:85:03:ee:ee:e3:36:e6:c0:62:db:7d:ee:
b6:93:4e:82:7d:80:08:f7:58:02:a0:2a:80:64:e8:
40:c0:96:b7:84:ff:e2:12:1c:e1:36:00:ad:46:ca:
29:56:2c:5a:43:03:e4:9d:94:60:87:fb:9f:99:25:
94:97:3f:15:78:da:90:4c:2f:b6:04:64:d0:da:5f:
79:41:38:29:17:32:8e:9a:4a:03:f0:ba:cf:38:dd:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:A0:D3:31:8B:0B:24:01:08:06:C1:6E:BB:56:C0:CA:8D:84:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e900bb0-de70-3011-ba64-ed6f585ef626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.123.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:53:57:ef:ae:b8:35:05:7b:7b:a4:ac:8a:0b:6c:67:bd:d0:
88:06:40:54:90:b0:48:d8:9c:05:ce:84:85:67:64:38:4f:0e:
3c:f8:62:74:70:36:8d:53:46:a8:7c:c6:1f:1b:cf:dc:86:83:
fe:87:fe:7e:ee:94:7d:37:f5:b6:04:73:42:9a:7a:6d:6c:63:
d3:a2:3d:e3:7e:c6:04:77:2f:7a:a6:ca:26:3c:f2:29:13:0c:
fc:96:56:bf:55:16:09:77:c8:7e:7e:b2:27:b5:49:9f:c2:b6:
ad:54:d1:af:b8:e4:a6:f5:e4:48:5d:3c:92:c1:89:ee:73:c6:
eb:b3:d9:dd:eb:c0:90:ca:c2:a4:53:8e:22:ae:3a:12:7e:d0:
b0:ff:7f:a6:e2:0d:da:a5:5e:23:cb:17:3e:5f:dd:f3:37:93:
e4:34:69:cd:12:4f:d3:b9:f5:ac:60:f1:1e:44:74:94:95:e5:
06:3c:99:b4:9f:09:f7:f8:bd:29:d8:46:5b:23:1d:5e:20:96:
bd:d6:2e:5d:83:20:27:e5:bb:50:71:ab:8d:72:8d:97:08:b6:
63:cc:18:31:7e:d4:d3:32:ae:f0:80:bd:48:6f:29:67:55:25:
95:99:ff:bb:c6:9c:17:3d:2b:bf:86:a1:23:e6:69:11:77:5b:
d8:19:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:51:45 2025 by rpki-client