Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5abef8b8-992b-33be-9fef-6ceff76077f8.roa
File: 5abef8b8-992b-33be-9fef-6ceff76077f8.roa (raw, json)
Hash identifier: rmCki1/IhPLOoaOJtp//PVABsU5x6Lnk8r70Y3+rzYc=
Subject key identifier: 28:66:B2:B8:72:0C:8C:14:74:D2:79:CE:69:D7:F3:34:0E:EA:C0:52
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842F9B1B16C61296225F14C58C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5abef8b8-992b-33be-9fef-6ceff76077f8.roa
Signing time: Mon 21 Aug 2023 12:00:00 +0000
ROA not before: Mon 21 Aug 2023 12:00:00 +0000
ROA not after: Thu 02 Jan 2025 05:00:00 +0000
asID: 19527
IP address blocks: 34.0.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:f9:b1:b1:6c:61:29:62:25:f1:4c:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 21 12:00:00 2023 GMT
Not After : Jan 2 05:00:00 2025 GMT
Subject: CN=24cc3b5f-3d0c-40cb-8cea-38cc6aa4731d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:f9:28:31:46:88:c3:19:a4:cc:1d:a0:68:
f5:1c:c6:ad:bf:5c:2d:29:00:05:13:ea:63:51:5e:
92:51:8a:3a:1d:91:e1:06:f5:4a:e4:fd:5b:5a:7c:
c3:39:03:c0:1e:5f:f0:70:70:80:3b:1d:24:cb:9f:
2a:60:03:05:1f:7b:71:0b:5c:a4:73:cc:a2:10:cb:
f3:0d:42:35:0e:14:fc:06:9b:9d:93:7f:d3:fe:fd:
ad:0f:11:50:04:46:1e:32:76:c2:18:05:a3:2b:2a:
13:03:d7:2d:67:ca:07:00:a9:8a:65:d7:83:3d:29:
f7:75:06:2c:7d:a5:22:ce:ef:4e:3d:90:82:33:e4:
f2:89:d8:2d:8e:0b:b4:c1:9d:fe:b0:5a:13:f6:06:
19:d2:82:5b:3d:66:04:bb:ef:27:29:33:62:1b:d8:
f9:4e:b2:6f:04:63:0f:53:e2:d6:d3:7e:ed:02:7b:
f9:2d:6c:3c:98:b6:dd:53:a9:a3:02:54:3d:53:19:
b4:8c:15:73:22:86:8c:8b:da:bd:8b:c4:87:2c:03:
bd:e3:92:c6:e8:d1:e3:36:a6:30:d4:a0:14:f6:cc:
28:23:27:aa:67:61:fc:93:ca:17:68:45:ae:71:a3:
6f:91:e8:6e:27:e4:b2:ca:e4:a0:01:27:78:ad:1c:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:66:B2:B8:72:0C:8C:14:74:D2:79:CE:69:D7:F3:34:0E:EA:C0:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5abef8b8-992b-33be-9fef-6ceff76077f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:94:8f:16:7b:a6:a2:fb:19:08:11:7f:da:4f:0a:1f:64:fb:
81:fa:66:ac:e9:21:d3:9e:1a:1f:48:0a:a2:a7:65:a7:db:e4:
ae:8e:be:a3:78:05:1e:81:c9:83:05:cf:03:2f:2b:e6:14:2d:
d6:fb:22:d8:ac:f4:34:d4:56:03:a0:01:5a:89:34:13:0f:b9:
f5:f8:99:37:24:b2:ee:1d:8d:d2:cc:b1:67:6f:c8:62:de:b8:
8b:5f:06:da:85:be:b6:b4:da:fe:5f:b7:45:fa:65:ae:80:78:
b2:4d:3a:81:a0:29:8a:1f:87:46:b1:f7:de:d7:a5:03:95:e9:
58:30:6c:38:95:89:48:dd:d9:d8:37:5b:0b:35:a3:1b:9d:15:
63:fb:d4:3e:17:f5:b3:c0:cd:92:2a:93:eb:36:04:45:fb:2f:
eb:6b:ff:62:ad:a8:0d:f7:1c:13:fb:f0:2d:3e:a0:92:2f:cc:
e6:52:f4:0e:07:61:ef:5c:43:77:6b:b0:6b:51:bf:57:a6:12:
83:2f:1d:95:df:3a:8b:0f:ae:90:68:09:18:ae:43:38:50:c9:
c1:1f:84:e1:43:b1:51:a6:e2:bd:64:2d:45:3f:73:96:c4:c8:
4b:aa:a4:f1:28:b2:7a:bf:bf:7c:cb:fc:90:89:c5:a6:6f:fb:
8a:dc:e0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:57:57 2025 by rpki-client