Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f4a9c3a-1df0-3822-80c2-86a58b80df03.roa
File: 4f4a9c3a-1df0-3822-80c2-86a58b80df03.roa (raw, json)
Hash identifier: wG1InmufaZdKlf5Zrsnx7cSiqViQqBCEig82vuz12ao=
Subject key identifier: C6:CF:0F:F1:A9:60:21:8B:45:69:0F:0B:7C:52:47:2B:E7:84:8B:5B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EF19DCADE76C6155FA4B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f4a9c3a-1df0-3822-80c2-86a58b80df03.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.96.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:19:dc:ad:e7:6c:61:55:fa:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=817a7333-5ffd-47b3-b15f-b7bf7450024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:15:db:7a:25:07:10:ba:8b:19:02:ce:b5:
a1:9a:29:ee:0d:6d:44:5c:a1:7f:3e:4d:e2:12:c8:
85:5c:c8:2f:e6:0b:a4:a7:31:6e:36:a8:00:22:f9:
5f:c3:d1:05:2b:e3:13:dc:9e:70:d0:22:ec:8c:46:
a9:7d:0a:78:7f:bb:c0:9f:0e:85:df:fb:91:b4:2a:
10:ce:6b:61:d9:e7:52:2c:0f:a2:c0:82:88:b5:61:
00:00:21:b2:03:28:26:b4:85:45:9f:3f:83:d7:b1:
0b:f8:47:ce:5c:be:0f:5e:17:5e:e9:26:5d:06:3b:
3f:f0:57:dc:63:dd:10:e7:33:59:e3:dc:9e:94:2c:
b1:07:29:c0:d1:96:01:6c:0f:23:6f:c1:c3:f7:7a:
4e:03:ce:be:02:85:1d:d6:2d:39:e6:20:c1:e7:54:
2d:30:2c:b3:92:60:05:f4:a0:be:89:23:82:ec:99:
f3:07:9d:79:c3:2a:bd:ab:a2:57:44:f6:66:76:83:
c2:c6:b7:c6:46:6f:eb:21:4d:cc:bf:ef:73:7a:da:
60:57:ab:4f:05:9d:5d:50:a0:5e:24:39:d6:91:f7:
1d:e9:75:88:4e:47:87:08:00:71:ec:a8:18:37:1e:
03:cf:ac:25:ac:d5:e8:bd:05:66:98:8e:66:b8:42:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CF:0F:F1:A9:60:21:8B:45:69:0F:0B:7C:52:47:2B:E7:84:8B:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f4a9c3a-1df0-3822-80c2-86a58b80df03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:42:c2:0e:a3:ee:36:31:13:0f:c7:5f:c3:e0:4c:ec:29:a5:
6f:df:45:28:8e:c9:89:b6:8c:42:3d:b3:49:bb:86:89:42:75:
15:9a:e8:9f:94:b8:71:d0:af:cb:b8:1d:5c:40:e9:75:f1:92:
03:4a:41:f7:fc:9d:ef:93:45:e2:14:88:d7:7c:e2:d4:62:cb:
75:26:0f:17:4b:3c:c5:6d:7f:1a:dd:47:2a:84:c4:1d:e3:91:
93:60:98:56:dc:03:7f:c9:c9:c2:d0:1e:75:25:99:70:24:aa:
84:8f:9e:aa:6a:60:76:90:97:b6:27:80:fb:0f:58:9d:47:3a:
47:f0:6f:3f:b7:fd:77:89:76:e5:12:7b:ec:b4:32:55:f9:41:
3b:5e:19:c9:ea:f3:e4:3d:cf:46:5e:b7:82:36:c3:dd:2e:ce:
d0:8f:b0:83:ca:37:26:1e:9d:b4:9a:77:0e:7f:37:9b:dc:6e:
3e:2a:9f:00:ed:d9:69:a8:bb:43:19:7f:b3:7a:c2:ae:d7:41:
1d:bd:3a:61:da:89:34:76:d7:54:a3:85:31:ea:0c:70:e3:da:
e3:0e:84:8a:f8:24:2d:72:af:29:6b:7f:bf:99:7b:93:cc:c1:
bf:1b:38:3f:35:c3:a9:51:b4:30:6d:62:6e:55:79:33:41:7b:
69:78:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:37:52 2025 by rpki-client