Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f01d5f8-093d-3070-b8fd-5fb7cf84faf5.roa
File: 5f01d5f8-093d-3070-b8fd-5fb7cf84faf5.roa (raw, json)
Hash identifier: ZqFtP6MmI+HTN5wFo3OzYSwuD3QJiRLMblU8vaZM4xE=
Subject key identifier: 2D:38:85:85:DB:1A:41:60:86:48:6E:34:F2:CE:AB:56:9E:3A:11:23
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1489079B759A78B75E0160
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f01d5f8-093d-3070-b8fd-5fb7cf84faf5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:89:07:9b:75:9a:78:b7:5e:01:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ea92923f-3e6f-47a7-a90d-fca1345eb8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:9e:50:8b:fd:d4:99:0c:2c:06:f7:7d:d3:
68:e9:7e:0a:42:66:23:62:f8:0c:8a:37:fb:4e:fd:
74:c8:81:07:eb:bb:68:a6:30:e8:96:2e:a3:0d:0e:
c5:80:22:bd:cc:6d:01:c6:9a:30:f9:29:7e:b9:5e:
65:47:cd:cd:17:b6:8a:f4:3f:02:cf:27:d9:85:4c:
d6:c8:2b:a8:46:d6:52:fe:0d:e2:b0:7d:c2:db:70:
15:24:4a:61:9d:e3:12:ed:8b:b7:9b:54:ed:72:3a:
ae:0b:ca:d8:35:bf:d9:a1:0e:1e:f2:1e:8f:64:17:
ce:e0:2c:df:ed:15:7f:17:98:56:1e:0a:f9:40:9d:
4c:8c:6e:fc:e7:91:2d:44:70:6a:0c:e3:e8:0f:47:
fc:f7:50:05:49:b1:c6:9d:29:88:2b:53:d0:21:e2:
ad:f8:a3:2d:20:b9:7f:c3:91:f1:4c:3c:5f:9b:9c:
a1:b0:53:1f:fb:71:fb:eb:7f:56:83:40:46:f4:69:
ac:37:5c:b1:8e:9f:b0:f6:54:76:d1:48:dc:b3:8f:
d2:cd:a8:5f:98:fe:9b:15:fc:bc:3e:07:66:b1:e3:
2f:db:f2:f8:5f:b5:fb:84:fa:39:1f:cd:ba:34:b9:
ab:70:56:4c:f6:77:65:b1:78:ef:16:c7:6d:88:ca:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:85:85:DB:1A:41:60:86:48:6E:34:F2:CE:AB:56:9E:3A:11:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f01d5f8-093d-3070-b8fd-5fb7cf84faf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b6:3e:7f:d8:c9:12:1d:61:a2:28:06:3e:19:1a:fb:75:dc:
a5:b8:48:2a:6b:a3:09:13:6a:17:3c:ff:b4:bc:6e:57:e5:a2:
dc:58:55:c8:45:bc:f8:21:87:54:6d:a4:c5:82:8c:d8:40:8c:
fa:54:a2:76:ad:06:1d:a2:2d:b5:a5:1a:1b:64:39:98:03:c1:
50:4e:4a:07:fb:37:57:bc:00:41:81:e0:ef:a4:51:35:80:2f:
ea:2a:a4:3f:21:73:e6:f9:76:22:74:02:38:b4:df:44:24:1e:
35:a7:de:63:c3:b0:3d:61:2f:b9:fc:ac:50:d8:7e:4d:8e:e4:
d9:17:a9:f4:da:e1:9f:0d:d8:1c:a7:1a:23:e5:66:de:e9:3f:
28:ac:f3:49:f4:52:28:5b:3f:5f:19:c3:d6:25:65:20:33:0b:
37:79:62:3d:78:d9:2e:08:4a:86:d3:7f:18:41:9f:bd:7d:74:
e0:15:06:fc:b8:a8:22:8c:70:f3:b2:02:9b:c8:31:3b:3d:70:
11:64:e2:a7:38:c8:df:10:54:c5:1a:ec:44:37:28:46:de:b3:
2b:82:ca:1a:16:97:15:72:b0:b7:3f:da:73:4d:4a:d4:bd:37:
d9:11:02:de:5e:8b:45:ce:d1:fb:dd:5c:d4:70:6d:be:9b:fd:
3e:de:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:48 2025 by rpki-client