Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64a3aeb2-7f1b-3935-92d7-197379a9909c.roa
File: 64a3aeb2-7f1b-3935-92d7-197379a9909c.roa (raw, json)
Hash identifier: 98+rXIiDsPgcQ0l7KhyMNiOk0iprOg4pJ8aad6E/WAg=
Subject key identifier: 8B:15:A0:10:A5:E4:A4:DB:00:B0:44:35:02:13:31:21:F2:C2:DB:76
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6CC342CC36A16A764600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64a3aeb2-7f1b-3935-92d7-197379a9909c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.134.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6c:c3:42:cc:36:a1:6a:76:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=e4e553e5-bed4-4a3b-b22b-4f0e602af2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:aa:df:df:e7:83:a4:73:8b:05:09:0e:75:
ed:4f:43:48:49:6c:d2:ce:a5:3c:20:ba:30:a9:1f:
c3:7f:24:d3:76:e1:a3:83:78:b8:a5:78:c1:e9:86:
50:b3:de:63:24:01:a3:2a:58:83:69:50:b9:1f:e5:
03:35:a4:f8:90:cc:55:7d:9d:63:ba:03:33:0d:ae:
ab:c5:ee:12:58:5d:b8:12:d0:43:78:0e:85:97:ad:
58:a9:96:24:73:f7:22:bb:51:bb:10:c4:e7:1a:ef:
65:2e:cc:bc:37:79:78:06:22:3d:b6:b3:c4:7a:ca:
79:33:81:f0:54:b2:d5:99:72:ed:a6:ad:ff:6d:8d:
c4:e5:8e:b9:57:7e:9a:d1:9f:b3:b2:da:c4:f5:16:
cb:28:fb:4f:72:c9:76:e3:0c:52:81:45:a5:32:e7:
b1:e8:a2:57:a2:0e:72:9f:f0:30:ab:a9:25:b0:ee:
61:92:19:5a:bd:66:95:86:e8:50:d5:63:5a:0b:fd:
0f:37:69:92:63:f1:06:7d:1b:c5:65:69:19:48:1b:
a5:ac:44:86:48:07:7e:26:0a:f7:bc:29:b9:bd:f1:
8d:94:bd:b9:f8:9a:5d:55:65:eb:13:b3:6c:6d:91:
6f:ef:41:d5:3c:53:08:22:99:44:93:0f:21:6b:49:
9f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:15:A0:10:A5:E4:A4:DB:00:B0:44:35:02:13:31:21:F2:C2:DB:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64a3aeb2-7f1b-3935-92d7-197379a9909c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:7a:15:f7:39:b9:3b:45:93:82:ab:eb:24:f7:d2:f9:52:de:
35:c8:c2:c0:fe:9c:5f:ff:73:0e:ab:fb:63:c7:b2:ea:c3:77:
3b:f5:76:f1:29:d5:a1:fc:95:95:04:db:d7:b8:f4:08:36:c7:
f4:97:ca:14:86:a3:73:d7:8d:6a:78:02:c7:ca:cc:ef:61:19:
eb:7f:39:49:c5:77:2c:dc:78:fe:dd:70:ef:99:d7:4d:a2:36:
af:cf:33:6c:ea:f5:c8:e9:71:6f:90:7e:c6:f3:a0:39:8b:70:
1b:c9:48:a3:30:03:b9:51:66:4b:ab:da:6c:22:e0:0f:65:b4:
a0:c1:c6:ca:9e:aa:9e:b2:4d:26:76:0c:af:4f:69:fc:05:a1:
ab:9e:5c:40:6d:29:53:e3:59:fd:61:db:20:f0:61:eb:09:10:
20:bb:1b:c7:d6:7b:72:5c:57:53:c4:b6:41:e6:1b:a3:1c:5d:
3f:a2:8d:5a:81:67:a8:01:16:33:17:ae:05:96:b4:f8:95:6e:
eb:08:0c:8e:63:0e:04:01:0c:27:84:1f:d2:4e:2f:5b:81:88:
27:d1:7c:3b:97:cd:89:6e:5c:0b:c9:18:a1:64:92:76:49:5a:
26:65:6f:a3:88:cb:fd:55:a6:41:b2:98:25:59:f7:e9:a4:dc:
8c:5d:a5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:54:29 2025 by rpki-client