Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/653ff469-b4c0-325f-850b-dffa52329a0e.roa
File: 653ff469-b4c0-325f-850b-dffa52329a0e.roa (raw, json)
Hash identifier: VccHnCx4G/TPTDvxByGusn/eWU5KAnY70OnKaYEAIF4=
Subject key identifier: 70:25:18:56:42:EC:27:CF:B4:B2:44:93:91:90:8B:E2:AA:C9:D3:61
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1D5260F0B6BFCE03C6BC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/653ff469-b4c0-325f-850b-dffa52329a0e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:52:60:f0:b6:bf:ce:03:c6:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f3abc00e-c7f7-433f-b732-28ca7509924a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:4f:ce:ec:8b:12:af:7b:4c:d2:f3:61:9a:
69:0f:1e:1e:ac:bb:a3:04:aa:ad:2d:fb:81:1d:35:
36:62:71:ec:ee:38:f7:cc:d4:ee:5c:cd:84:90:37:
c8:93:ab:47:05:52:14:23:50:cf:02:01:2a:9e:a4:
5d:f5:ea:d8:4d:c2:cd:52:44:c4:60:55:7b:57:97:
53:c1:ba:29:e8:e0:ff:6a:04:fe:5f:cb:2e:6e:a6:
d7:54:de:f7:d1:0a:b2:dd:4e:bb:5e:b8:d1:61:71:
14:f2:72:7a:34:5f:b2:57:4a:66:27:1b:37:58:1d:
fb:d4:d3:eb:85:45:ef:f1:d3:ca:57:6d:c5:bb:d9:
61:71:d4:72:7b:54:96:81:d2:00:7c:fc:c0:67:e7:
51:78:d5:a2:18:1d:0b:75:12:62:3c:21:49:05:ac:
f7:e0:32:26:45:02:04:69:ef:dc:25:18:89:72:88:
a4:03:1c:1e:9f:dd:a5:67:00:7e:18:cd:99:68:f7:
fa:40:a5:6b:89:89:1f:d5:94:f5:00:56:3f:4d:24:
20:5b:1f:c9:82:c5:ee:28:12:25:b5:d6:95:35:82:
54:c7:22:aa:e8:c9:a9:4f:8c:d9:3f:9d:4a:35:56:
d1:43:b7:35:a1:ce:34:2a:ca:f1:47:72:46:b6:e9:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:25:18:56:42:EC:27:CF:B4:B2:44:93:91:90:8B:E2:AA:C9:D3:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/653ff469-b4c0-325f-850b-dffa52329a0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:72:8d:85:ad:57:4e:e2:df:bb:ee:fc:73:ba:64:45:d5:29:
02:f6:75:2e:17:14:05:cf:d5:3a:90:00:aa:9e:3d:64:47:c3:
03:d9:43:53:de:34:4b:0e:ad:78:f0:4e:35:73:02:d8:07:d5:
6b:42:4e:b2:50:ee:a7:44:10:16:9e:55:20:a0:24:4d:f8:76:
e6:dd:09:5f:7a:a3:fd:89:b9:a9:e9:a7:24:e4:f7:a0:12:4b:
b9:ea:1a:f7:bb:1b:a1:a6:3a:5a:1d:f3:88:20:a0:75:54:d4:
a3:4c:fd:1a:46:fd:e5:d8:77:3b:ee:b2:2e:8c:25:6c:b8:f5:
33:b5:de:37:d0:38:ca:26:40:34:19:9b:9a:f9:ea:46:63:4b:
13:6c:be:49:6a:75:f6:40:89:6a:3c:ec:0f:b3:4a:be:19:2c:
f1:87:c2:35:9f:94:d1:62:18:4f:5b:bc:c4:d9:79:27:b9:d3:
6d:21:66:53:e3:67:3e:19:ef:5d:63:09:9f:fd:5c:d0:bf:0d:
0f:1d:f2:5d:5a:80:31:50:56:da:9e:ca:12:80:69:da:c0:0f:
eb:b5:ba:7f:90:ab:29:2f:ec:b3:c2:05:86:8e:b2:4b:60:e1:
b8:ca:dd:5b:a2:20:23:61:6b:e6:12:e8:d4:0b:26:f5:e0:a4:
4d:46:17:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:49:02 2025 by rpki-client