Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afdcd1e-45f9-3390-ba29-0bfddcfc5f89.roa
File: 5afdcd1e-45f9-3390-ba29-0bfddcfc5f89.roa (raw, json)
Hash identifier: a4W15rIgIkRyn2VZAeJHsueQk9/y0jNrf6ZphKpO8iQ=
Subject key identifier: 71:2D:93:E9:97:1E:81:59:14:C2:30:11:33:F6:07:23:2A:FC:0D:43
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6A32BE85ED26FC9617E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afdcd1e-45f9-3390-ba29-0bfddcfc5f89.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 34.80.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6a:32:be:85:ed:26:fc:96:17:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=796a3006-1079-4cde-b52c-78271a0828cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:e5:30:da:48:5f:8f:8a:a6:b1:f9:e0:98:
9e:fd:3c:86:1c:9d:f9:07:a4:15:07:ee:e2:ed:f2:
0a:06:ce:cd:19:b7:7f:d1:f1:01:17:22:88:9d:15:
cc:68:8f:42:3e:e6:1b:20:dc:2a:de:61:9f:23:d4:
ee:3a:3c:8a:99:71:b1:5c:14:11:d7:3c:2b:e5:70:
9a:64:88:0a:fc:ed:0a:18:a2:ce:90:2c:e8:8e:92:
33:c9:4f:eb:c2:2c:8a:19:b6:e1:dd:c4:e8:64:8f:
c4:a7:17:03:b3:34:ba:53:82:d3:28:70:11:af:c5:
20:43:88:58:f7:90:0f:e8:a0:7b:41:eb:a0:d3:90:
8c:01:17:2b:13:c4:c7:4c:ae:78:c4:1f:dd:b9:59:
d8:eb:25:3d:71:2d:74:8a:54:1c:20:aa:52:73:77:
94:d9:ec:46:88:b3:70:e2:ef:f0:1f:5d:dc:d7:95:
78:3d:f4:2c:dc:5f:95:70:23:3b:f1:a0:22:ae:65:
cd:74:3b:f4:d6:1e:a4:c2:4c:2f:6f:d3:87:8d:37:
17:aa:f6:fb:f4:3b:c1:65:0f:09:5b:1b:fa:23:25:
6c:80:c0:6c:84:d2:e9:90:31:81:fb:0e:cf:08:0d:
96:e9:7c:63:6e:4e:69:0a:2f:ae:8f:33:17:b2:da:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:93:E9:97:1E:81:59:14:C2:30:11:33:F6:07:23:2A:FC:0D:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afdcd1e-45f9-3390-ba29-0bfddcfc5f89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.80.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:53:52:f0:9d:95:be:e5:23:f0:33:dd:81:a9:b0:d6:cf:fe:
53:e4:d0:43:65:e6:f4:50:e1:db:fb:f6:32:c2:b8:6f:63:ca:
d2:62:d3:7c:09:7e:89:56:29:be:5b:2b:21:b6:ee:72:2e:be:
3c:c7:bc:75:c5:1f:1d:78:a9:66:c8:ee:7c:9a:05:fb:ae:d7:
b9:1d:45:87:c6:a2:11:52:90:be:8f:be:66:0c:ac:80:27:c0:
f0:23:5a:6f:a3:1d:98:3a:b2:c4:ee:f0:5b:df:70:c9:6d:80:
23:86:6a:eb:ca:8b:ce:f3:58:78:2b:23:91:c2:cb:10:ac:2c:
1e:45:05:c1:60:6c:c6:21:07:be:d5:76:91:94:32:8a:cb:ea:
89:4f:3e:6a:31:0e:97:da:d6:34:b3:ca:fd:f6:f6:2f:b8:2a:
07:83:a0:37:1e:1f:1a:ad:d2:09:c7:10:70:40:a8:2d:a7:ed:
05:10:c2:c0:48:2b:d1:8b:8b:43:5a:12:c8:00:88:5f:08:26:
ea:35:88:0e:8f:3f:e8:76:03:6a:3b:7d:71:68:2f:36:9c:7f:
9d:bc:c8:28:62:95:bc:6a:b2:09:28:3e:bd:64:d9:c2:e6:b5:
bf:38:a8:8b:39:43:69:be:87:f5:1c:40:d9:02:e8:5b:f2:40:
a0:d9:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:20:08 2025 by rpki-client