Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/517c5981-869a-304d-a03a-92f8d0db5aca.roa
File: 517c5981-869a-304d-a03a-92f8d0db5aca.roa (raw, json)
Hash identifier: FwFv3o+XVPDi7KN6DC4ywtaVFFzpnCcBDeNgFXmyHSs=
Subject key identifier: 51:44:47:F6:57:7D:80:DA:66:FE:3C:3F:F8:2D:24:0A:CE:A7:12:AB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A26441972B5FDB182771D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/517c5981-869a-304d-a03a-92f8d0db5aca.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.83.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:44:19:72:b5:fd:b1:82:77:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fb66acf5-7bff-4474-ab45-383be4633110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:47:bc:6a:fd:17:e5:ee:51:37:d7:06:02:
cc:9f:63:c8:db:95:6c:32:4a:67:e5:07:01:0d:37:
5e:b2:da:61:c2:1a:62:5c:4a:5c:ad:d7:66:ed:59:
c9:94:b6:e5:8f:a1:36:8f:30:43:e0:ac:e4:3a:7e:
00:45:60:4c:1b:d4:c0:22:3f:99:ec:ae:ae:49:27:
30:07:ce:f1:51:26:40:91:82:99:c6:5d:97:67:c1:
3f:5e:0b:cd:45:3b:2e:60:9b:84:d6:7f:91:7b:cb:
92:05:a1:cd:5c:cc:03:1d:8e:a8:35:b2:22:ec:ab:
dc:38:03:55:b5:65:d7:0c:78:37:8e:ed:55:b5:ed:
9b:cc:48:66:6f:29:cb:0f:6c:ff:42:43:fe:fa:40:
95:d0:a3:cd:71:62:20:ae:ae:54:15:06:e2:6f:8f:
01:c1:94:5a:79:da:bc:22:9b:f7:fe:8e:b5:1f:c4:
be:98:7f:cd:8a:01:43:04:d4:58:28:98:e7:d1:e5:
3c:63:0c:ac:7a:0c:00:36:d7:72:fa:51:5e:d5:91:
71:c4:4c:92:1d:ea:0b:fa:bd:06:c8:ff:ef:e9:c4:
eb:e3:42:8e:be:8b:c1:ba:c2:80:17:e0:3b:8d:d9:
42:0c:41:1f:ed:0f:f8:94:60:62:cd:49:34:db:f3:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:47:F6:57:7D:80:DA:66:FE:3C:3F:F8:2D:24:0A:CE:A7:12:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/517c5981-869a-304d-a03a-92f8d0db5aca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.83.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:cb:35:35:86:5c:ff:a4:32:7a:6f:35:5c:ee:e6:21:83:93:
16:00:83:16:c8:7b:a7:93:92:af:1d:14:9c:d5:34:ac:ee:85:
e7:62:4a:22:65:f4:af:a7:d2:bf:21:af:9a:de:67:61:59:f1:
ce:c2:5c:bc:15:7c:87:49:d5:75:9b:3c:8d:54:7b:74:02:c9:
03:84:d0:7f:e9:b6:ed:70:b8:7e:75:64:11:84:c3:55:ef:52:
65:5e:c1:20:36:1e:3d:9c:b1:b0:05:f1:81:55:fd:04:c9:2d:
72:fa:03:4e:9a:73:8c:31:a7:26:c6:47:62:c1:20:6b:3d:41:
0c:73:d4:8a:cb:77:43:e8:10:67:71:82:ee:b9:77:5c:2d:40:
58:8a:4f:0e:92:96:22:69:7c:86:38:60:3c:e5:bb:eb:f8:19:
ac:b7:50:b0:d7:23:3f:55:da:ef:78:40:ea:5c:34:14:88:05:
6d:55:ed:45:49:2d:91:cb:1a:7f:a5:56:18:90:32:0a:58:e7:
be:17:81:f4:84:2f:cd:90:be:65:1b:83:ea:ab:2c:fc:ee:f3:
cc:ff:3d:b7:ba:83:7a:5f:60:d9:9d:cc:4a:c6:fc:71:ff:16:
8c:d8:47:3b:23:5d:f6:9c:0a:b7:e7:d0:a6:22:6b:7e:73:11:
77:c0:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:53 2025 by rpki-client