Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e9cad48-e1a6-3d49-a97c-9e76f2d03d72.roa
File: 4e9cad48-e1a6-3d49-a97c-9e76f2d03d72.roa (raw, json)
Hash identifier: SHqBy+EJDHp1mvIV1JrffCkJ4urT4JJB5L16fD5l+H0=
Subject key identifier: D7:36:A9:48:9C:D6:74:2E:1D:4F:68:38:76:C8:8D:5F:60:52:8D:CA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A213E1D68C00CC437DA9600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e9cad48-e1a6-3d49-a97c-9e76f2d03d72.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.66.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:21:3e:1d:68:c0:0c:c4:37:da:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fd2bc07d-6304-46f7-9d53-26fd4aae7c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:d1:7d:0c:9f:1d:a7:b7:cd:99:22:17:95:
59:85:dd:60:56:3b:52:47:b2:10:c0:5d:4d:2f:69:
42:27:54:b5:ae:2e:10:75:86:cb:a9:a3:b1:f9:ae:
f4:9b:87:49:3e:4d:37:30:33:fb:e4:f6:5b:3d:6f:
29:e0:a4:f1:df:13:26:e2:b1:6d:69:d0:f8:60:b1:
33:d0:f9:19:48:e3:1d:02:43:c0:38:a2:bb:94:65:
9d:8e:6b:61:0e:3d:2d:97:66:ba:79:61:5c:15:e2:
be:e8:24:6a:75:ae:58:99:3d:a1:56:37:b2:af:46:
65:01:66:93:f3:20:50:4c:ad:bb:1c:2d:a6:75:d3:
ff:e2:fe:17:2a:8d:7d:06:5f:11:31:12:99:73:6c:
49:cc:36:26:75:a9:ed:5a:86:b6:bf:c5:2f:dd:70:
ec:ee:68:b6:00:f6:10:14:d5:ed:e2:18:18:5a:28:
a3:e8:1e:73:12:23:f2:11:69:24:d4:b4:57:46:14:
bd:b9:8b:b0:8c:00:db:b5:08:26:0b:2f:75:60:66:
b1:56:2a:ff:6e:c4:69:83:5e:fb:6d:46:3c:e4:f0:
2b:83:dd:a8:d0:7c:c8:6e:b4:61:75:89:9e:eb:5f:
f2:03:51:ba:ee:41:bc:46:c5:6f:56:b2:56:c7:27:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:36:A9:48:9C:D6:74:2E:1D:4F:68:38:76:C8:8D:5F:60:52:8D:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e9cad48-e1a6-3d49-a97c-9e76f2d03d72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.66.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:60:3b:6a:ce:d0:d8:b9:cc:44:8f:cc:ef:71:eb:9c:f0:16:
a7:66:09:37:62:c7:f7:d9:92:c2:be:a4:44:da:6d:31:ef:cc:
ba:5d:5c:77:29:77:b7:a0:b5:6c:c6:4f:3d:a2:8b:57:f3:14:
7a:be:af:f8:34:40:0e:c2:a2:96:1c:6d:63:d0:16:98:05:58:
7d:f2:cb:25:4a:34:dd:9d:7c:68:62:16:9b:f3:e6:90:7f:c7:
7d:c0:82:96:b6:1e:bc:c7:44:19:ad:59:8b:9d:41:08:d5:e0:
ff:7d:71:ca:0f:ad:c0:4a:71:f8:30:2e:d0:ab:f4:36:45:eb:
7a:16:91:89:1a:32:c6:e0:4f:11:77:14:40:d5:da:93:48:0a:
65:a1:97:90:f1:bb:e8:f0:3e:4f:31:14:af:f6:20:1b:08:93:
58:c2:32:a6:08:44:9d:35:88:6e:43:91:85:a3:0a:4e:8e:fe:
02:50:c3:44:d5:eb:a1:ad:76:26:e5:97:98:24:93:59:13:c1:
1d:81:20:2e:0a:c7:00:32:98:a0:60:0c:8f:62:b2:10:ba:b1:
7d:47:f4:86:d7:66:a1:36:53:38:c6:b1:fd:4a:5f:be:27:3f:
4d:e6:c2:c3:54:85:bc:05:c2:e2:27:40:09:3e:34:90:df:9d:
26:c9:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:10:15 2025 by rpki-client