Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/651941a8-3227-339d-8f04-f01927b7c54d.roa
File: 651941a8-3227-339d-8f04-f01927b7c54d.roa (raw, json)
Hash identifier: THpyJp+UezEpr4yiE9jnn+v9I9oDPtDU/a7VCF3CnOQ=
Subject key identifier: 87:92:E4:F5:03:32:67:99:54:9A:B6:31:33:F0:5A:05:48:C9:0C:44
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F0412D8C819DAB601DC180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/651941a8-3227-339d-8f04-f01927b7c54d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.153.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:41:2d:8c:81:9d:ab:60:1d:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d8bbff33-817b-4aed-9d5c-0321a1ead0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:f5:4b:f3:01:70:14:1f:36:5c:6b:39:82:
07:8b:ec:09:0a:2e:37:f9:bb:3f:ed:3c:5d:a8:8b:
17:c9:f5:65:62:55:4f:17:50:9c:c6:e9:2f:9c:64:
1d:38:92:3d:b4:f9:11:79:6d:7a:87:67:b8:f7:04:
e8:d7:ed:af:08:16:a0:32:43:4e:39:dd:8a:72:db:
92:5a:06:89:ec:d5:ac:3b:8b:6c:f5:c5:62:aa:48:
e3:e3:97:b9:df:ea:ab:77:6c:0a:df:61:85:93:81:
2a:b6:b3:db:10:f7:96:d0:ab:ab:c1:07:8d:3f:f5:
3c:f5:9f:28:9b:86:78:08:30:d2:61:38:c4:bf:8a:
ac:06:09:c6:58:bd:db:ac:ca:90:59:7b:ef:86:7b:
04:f1:94:35:38:1b:70:b7:08:98:cc:a7:cb:ad:11:
61:43:ed:8c:dc:be:54:37:6e:52:16:a5:9d:77:f5:
18:18:41:aa:cf:10:17:fa:0f:4a:d7:bf:a5:3c:5c:
60:4c:d5:11:78:b9:28:dd:5c:3d:c4:1f:f7:c2:4b:
71:b7:84:71:d3:db:5b:19:dd:ec:c4:d9:a9:92:d9:
e1:d3:95:f8:9c:e1:44:7b:a5:1c:5e:0a:f2:30:ff:
e3:9f:94:0e:04:4b:c0:41:50:fb:24:01:8e:13:f1:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:E4:F5:03:32:67:99:54:9A:B6:31:33:F0:5A:05:48:C9:0C:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/651941a8-3227-339d-8f04-f01927b7c54d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:07:a1:aa:50:b5:a7:04:e4:1c:ff:5f:6d:22:fe:a4:ed:61:
f2:be:00:ce:89:17:85:72:4b:77:31:e5:2d:ea:e1:8b:f1:32:
7f:5a:c6:2a:47:58:bd:4c:e3:ec:b6:65:31:69:2e:40:88:9c:
24:24:a2:e3:c9:91:94:bd:c8:92:50:dd:50:99:cd:38:a6:ab:
f8:eb:92:f2:ce:69:dd:a7:9f:d6:29:9c:64:28:78:29:6a:f3:
90:06:cc:26:aa:8b:4a:d0:dd:41:eb:66:8d:45:ed:82:3c:b2:
f6:e6:94:15:34:3f:fa:48:67:ef:68:f6:36:0c:ad:74:fb:c5:
f2:4c:f4:91:b3:24:a2:2c:5d:4e:4f:de:7d:85:c4:9c:2c:5a:
19:18:2a:2e:3a:0c:9c:69:b6:e5:52:8b:19:a1:d6:a2:96:3d:
5b:5f:7d:c6:9b:aa:ca:42:18:74:7d:fa:f4:39:4a:cc:43:03:
fe:fa:2a:4c:12:96:c7:12:f8:33:da:22:37:b6:57:95:41:1d:
fa:72:a7:57:e9:ec:85:fc:c6:c0:11:d8:28:1f:64:f7:6b:16:
99:ab:87:35:94:67:12:79:30:6d:53:df:38:0e:18:8d:db:84:
47:be:3f:b2:19:bd:56:ba:78:ad:5a:79:52:d6:fe:f3:5f:f1:
ad:cc:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:19:33 2025 by rpki-client