Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5a4c5354-b3fa-3368-b48e-1e6705f0b0dd.roa
File: 5a4c5354-b3fa-3368-b48e-1e6705f0b0dd.roa (raw, json)
Hash identifier: f017aIUAx751k+3KG8CForJrZUIj8Gtz2fGeVK3vnOU=
Subject key identifier: 9A:9B:D9:9B:40:67:9C:65:3D:4A:02:70:55:BC:86:94:34:0B:08:50
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0B756AC9E299F081044EB0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5a4c5354-b3fa-3368-b48e-1e6705f0b0dd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.85.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:75:6a:c9:e2:99:f0:81:04:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5efddf9e-5457-4ad8-860d-ec50525a78cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:72:a3:86:ab:1c:26:f5:54:6b:25:90:74:
0f:88:93:b5:2b:44:80:97:2d:2a:85:33:92:2f:e1:
c9:f5:f5:87:0b:98:3b:3b:43:bb:72:d6:c6:24:df:
dd:03:ce:6e:c5:e6:d0:02:50:ba:9a:83:07:eb:6d:
89:53:6b:81:6f:8f:a5:c8:33:3d:aa:df:ba:ee:9c:
51:ca:a9:dc:f0:6c:cf:71:84:16:5f:b1:38:62:12:
9a:2a:cc:c7:d8:8a:a1:85:7c:f6:4f:ab:b5:eb:6d:
2f:08:49:ef:39:74:4b:bf:a5:94:e0:b1:9d:2e:c1:
2b:ef:e9:94:04:02:4e:57:eb:b8:49:b3:26:17:5f:
9a:9d:29:50:a9:36:81:a0:d0:8f:76:7e:32:73:5a:
bd:a1:fe:08:f0:79:dd:54:c8:86:ca:fd:2e:aa:99:
54:43:dd:78:2b:ea:08:4d:5b:5d:40:ed:80:ac:72:
9b:75:cf:73:24:9b:ea:65:d2:92:32:e0:da:4d:07:
c8:a4:e5:53:00:0e:83:77:d1:ee:92:dc:c3:ed:06:
ad:63:54:08:9c:05:de:b0:7b:72:e8:59:e7:93:0a:
80:04:87:6c:c9:4f:c0:cc:1b:94:b1:51:a1:44:e2:
be:c3:61:38:a4:72:b9:34:05:65:18:83:b4:0b:5b:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:D9:9B:40:67:9C:65:3D:4A:02:70:55:BC:86:94:34:0B:08:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5a4c5354-b3fa-3368-b48e-1e6705f0b0dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.85.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:10:94:6f:58:28:46:73:bc:a7:68:e5:43:ac:54:79:6a:ae:
a3:77:85:65:79:f6:8e:fd:3b:af:23:de:33:5d:16:29:d2:72:
3b:e2:eb:16:66:37:3b:4c:48:6b:60:ba:e4:8d:93:71:27:fc:
7f:eb:91:be:9f:ae:f8:2b:42:ba:a4:3b:c9:d3:73:73:8b:e4:
36:eb:16:dd:c7:37:13:17:5a:d2:b3:8a:cf:e1:a5:43:75:d3:
c1:37:40:11:d7:91:e8:14:56:91:6d:e9:19:2c:ec:83:5f:bc:
ca:93:0f:59:2e:0b:31:79:2f:a5:c3:ac:7f:92:43:73:25:83:
57:40:cf:b6:27:d2:ab:53:8e:16:7c:23:bb:94:1b:ba:73:81:
fc:6d:2f:49:2e:42:79:2c:fc:f4:f8:fe:6e:f6:58:f2:f6:c8:
49:5d:d7:0a:42:e4:55:53:76:41:91:41:c7:eb:96:46:52:ce:
75:e5:f4:0d:a3:a8:55:e7:e4:48:ef:e6:d0:aa:f8:4c:2b:b0:
1e:fa:4b:3a:4f:25:ad:6e:ac:21:e9:b2:1b:89:50:2d:47:cc:
cb:4d:d6:f5:f1:5d:1d:60:10:01:f5:92:76:8c:7b:69:b2:a8:
e1:a9:7c:ca:8f:fc:01:5d:67:aa:bd:77:53:ea:d4:6f:85:29:
4d:22:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:35:44 2025 by rpki-client