Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51bdba3a-53f0-3144-9b00-c98a7fff9975.roa
File: 51bdba3a-53f0-3144-9b00-c98a7fff9975.roa (raw, json)
Hash identifier: f8Zp4+WtLEynfF2ajnBopWrjd+GBCgSqp4ks3oRwmS8=
Subject key identifier: 37:4F:2B:6C:EE:93:7D:6E:AD:D1:7A:8A:23:11:CD:BD:5A:82:2B:06
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A13887508F7FDD9F1B94580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51bdba3a-53f0-3144-9b00-c98a7fff9975.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.143.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:88:75:08:f7:fd:d9:f1:b9:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0f1ed893-2907-4a66-bc5f-6fb324858e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:bf:75:89:30:fd:f5:68:65:0d:63:11:f9:
4f:5d:68:92:4c:c8:a5:5a:6e:55:1d:e3:ef:bc:c9:
01:12:c0:ca:91:86:f2:32:31:8f:8b:e4:04:15:3b:
bd:6c:eb:59:3b:eb:3a:5e:fa:39:f5:eb:e9:48:c0:
28:37:4e:91:3a:b0:4a:05:f5:05:58:0d:94:76:b5:
a2:04:9e:27:04:0a:aa:57:4e:36:85:99:41:8d:0f:
d5:79:38:f2:1c:18:9f:67:0a:2e:5d:26:8a:6e:af:
ca:35:fc:16:9b:87:e7:98:84:b7:4f:78:4f:e2:8a:
20:a2:37:2e:0c:ab:d2:55:e2:ea:f6:6e:1a:3d:0d:
41:0d:05:ea:65:c1:cb:6a:85:6e:84:88:ef:74:20:
34:51:a7:94:b7:9b:2b:5d:2a:0c:a7:54:b8:e1:aa:
60:10:d7:02:d5:6f:ce:26:9c:6b:55:c2:51:22:ff:
c0:4e:0f:ca:67:66:d9:37:f9:74:1d:26:e6:db:89:
45:78:b8:81:ba:06:33:0f:84:77:2e:a6:68:98:49:
65:ab:20:ce:71:0d:47:4e:aa:21:ed:13:35:ea:b1:
c6:cc:b1:37:8b:33:e2:2c:a0:ad:8e:a2:53:dd:91:
93:95:15:0a:49:6d:55:3e:93:79:a4:92:89:b8:b4:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4F:2B:6C:EE:93:7D:6E:AD:D1:7A:8A:23:11:CD:BD:5A:82:2B:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51bdba3a-53f0-3144-9b00-c98a7fff9975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:8b:01:b8:4c:93:9c:b9:85:90:38:2c:7e:0b:1e:1e:e1:65:
a8:60:37:43:08:72:3a:62:40:b3:bf:d6:80:4a:17:f6:cb:13:
f0:fd:47:d7:ed:ff:9e:c1:1f:ff:37:77:9f:29:9b:21:40:88:
33:a3:61:07:a7:db:f8:53:80:83:2d:91:0f:37:3f:f9:b6:04:
13:6c:03:78:8d:09:45:ee:21:03:5a:f4:9a:4c:f1:2a:c1:d0:
a7:a3:2e:0e:8a:10:92:d6:48:64:5e:63:8b:16:8e:69:03:a4:
ee:eb:5a:f0:da:99:e4:b1:e1:84:3d:e3:06:c2:5c:9c:61:14:
73:71:28:c3:23:77:cc:e6:7e:9c:73:11:27:43:27:e6:73:f5:
91:b1:65:b6:1c:9c:af:16:b2:95:6e:ed:94:53:9a:65:78:c9:
b5:68:a5:b5:5b:47:89:83:6b:36:99:59:e9:42:cc:4e:00:e4:
c4:b1:ae:1f:f1:86:c6:8b:3a:13:33:15:19:83:87:0f:6d:0c:
22:40:4a:bb:2c:29:39:c4:1f:eb:c2:6b:44:09:37:03:d4:48:
3c:0f:f3:f1:cb:ca:13:03:93:e6:55:b0:c8:38:70:e8:83:57:
91:a4:0b:84:29:9b:0a:aa:b2:ab:ee:3b:18:ee:38:ab:df:0f:
cb:db:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:01:06 2025 by rpki-client