Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f3995f0-e7ab-3ce0-a60f-9d4f913b6215.roa
File: 5f3995f0-e7ab-3ce0-a60f-9d4f913b6215.roa (raw, json)
Hash identifier: Zk5rKRAmcTGlRWyOSYHknUs9xTiWNrpYya55B5J8eAs=
Subject key identifier: A4:09:FD:FE:0D:84:F1:BF:43:7A:7F:56:FE:46:A7:8D:D0:20:60:62
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7768EA9264B669B9C220
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f3995f0-e7ab-3ce0-a60f-9d4f913b6215.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.97.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:77:68:ea:92:64:b6:69:b9:c2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=7fd0c9a3-9f5c-4de9-b544-d5100a13da1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0b:6f:56:c3:a8:a3:66:15:ab:ff:a1:61:31:
48:b1:d9:35:9e:0b:68:72:9c:3f:a3:a3:f9:ef:e5:
b6:8d:32:7d:5f:dd:5c:67:ee:ad:23:70:b4:45:da:
c6:27:30:c5:5f:10:b8:ad:6e:3d:d8:83:cf:51:4d:
aa:ec:6a:b7:91:f4:af:d5:45:de:ab:0a:45:2f:48:
cb:ec:ba:66:9f:d3:2f:ad:57:9f:2a:4a:b2:9e:b0:
f6:69:c4:3a:41:44:d0:b7:b0:58:2e:eb:ff:9d:c9:
1f:5e:ed:e2:d7:f4:ac:e8:a4:e7:c2:f4:04:23:3e:
3e:15:2c:25:3a:ee:74:f6:a2:f0:db:c3:1a:d1:c2:
d9:62:d3:4b:ae:02:6b:b8:53:b2:7d:a6:b2:68:ab:
37:77:46:95:05:15:38:ff:18:d1:7e:eb:49:89:21:
1d:61:e6:07:4a:b1:32:84:ad:ba:8f:10:d1:84:b1:
a0:bc:ef:b6:e8:53:90:40:87:04:6e:5b:5a:31:bc:
86:f6:f1:18:29:fa:33:df:a4:f1:fb:ee:b2:da:0d:
3d:3c:0b:84:13:ac:e5:19:8a:1c:9f:20:69:6c:55:
ed:9d:bd:7a:69:0a:09:03:f0:38:47:9f:3b:3e:87:
64:8c:90:74:5d:55:f7:da:e9:98:a9:8f:f3:14:91:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:09:FD:FE:0D:84:F1:BF:43:7A:7F:56:FE:46:A7:8D:D0:20:60:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f3995f0-e7ab-3ce0-a60f-9d4f913b6215.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.97.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:52:e9:81:d5:fa:a5:b3:ae:21:f0:ae:65:2a:c3:ae:56:d9:
c5:81:30:f3:bd:68:b7:8a:1e:26:5b:d3:6d:b0:f1:23:f1:09:
e5:92:87:e8:2c:c7:7a:70:cb:e5:37:80:4d:b6:cb:ca:e2:b4:
2a:76:7d:05:cd:0e:4b:23:a8:66:63:9f:cc:61:58:66:ef:f7:
bb:d9:2d:b1:f5:b0:52:37:1d:d3:80:7c:69:a0:ba:4f:26:25:
3d:d9:f2:ae:af:90:c1:3c:05:85:6a:8b:ca:ef:ea:67:b6:9b:
fa:d7:91:f0:9b:6b:70:73:66:59:f9:ea:8b:d6:ed:b7:1a:da:
d3:bc:3d:ab:e2:b9:a0:50:68:39:7f:01:c1:f0:c2:d6:23:3e:
8c:4e:6f:63:59:a0:86:86:a5:40:0a:4a:03:ca:f8:ff:8a:eb:
f2:49:e4:ff:f3:bb:7c:c9:ed:bb:20:6c:64:f9:c5:05:46:63:
91:e0:20:d2:99:61:ed:54:46:30:76:60:ac:dc:ac:7a:d5:1c:
84:24:dc:bb:cb:06:31:3c:79:e2:56:80:ea:4b:09:d7:7e:c9:
b2:e6:c1:b0:be:9c:85:d4:83:2b:0b:9d:ce:14:9f:58:72:dc:
a2:b4:52:7d:2b:f8:68:54:da:eb:ad:94:88:c3:b5:a2:17:89:
71:2b:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:49:55 2025 by rpki-client