Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66a1126f-ceb6-364f-a3f6-c6102220849f.roa
File: 66a1126f-ceb6-364f-a3f6-c6102220849f.roa (raw, json)
Hash identifier: DMcFzp9ED406yx/igcD2db7b4seYcK5ZxoZwj1Es460=
Subject key identifier: 0D:D1:76:4D:68:BA:01:26:B6:17:F7:07:56:05:A2:D0:3F:FB:11:EB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F029E5B1597D130BECAD40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66a1126f-ceb6-364f-a3f6-c6102220849f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.129.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:29:e5:b1:59:7d:13:0b:ec:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c11adc6b-2228-42e8-9d3e-ad3a78bed606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:31:5f:f5:d0:08:a4:06:6f:91:dc:11:cb:
ae:df:1b:75:87:c2:5d:8c:a2:5b:f3:f6:f3:a8:fb:
a2:64:0b:46:43:df:22:09:7c:f2:e5:6b:80:41:b6:
03:c7:df:67:96:e2:2a:fa:62:15:25:56:09:3f:c0:
e6:ca:aa:e2:64:92:d4:af:4b:28:94:16:b0:7a:da:
e6:a6:3f:f2:2d:67:72:58:46:7f:2b:63:37:af:bf:
28:0f:96:19:79:9f:a1:af:3d:a0:4c:b7:c8:8f:9c:
f6:45:78:37:64:9b:5d:f4:f7:fe:c2:47:35:48:40:
ce:34:fc:46:b7:f7:58:d1:d6:31:65:14:73:83:ec:
9d:4b:df:1a:1c:21:ca:04:8c:9b:0e:a6:be:a5:55:
b6:a8:ee:3d:e0:18:1b:a8:03:b6:7c:5d:89:20:b5:
29:d4:dc:63:7b:b9:15:3b:e3:43:0b:02:33:96:1b:
9d:c8:ba:10:27:20:e6:e8:72:c3:6e:9f:2c:4a:49:
45:4a:80:0d:52:a0:4b:4d:22:5a:e7:9b:73:4a:b4:
00:76:0f:56:f4:9b:a1:7a:6e:2e:c0:29:0d:0f:79:
6c:34:5a:a1:52:00:4c:65:e3:c6:e5:08:46:4f:58:
25:ec:ae:1d:f5:40:2b:5f:6d:b3:11:90:63:c2:3e:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:76:4D:68:BA:01:26:B6:17:F7:07:56:05:A2:D0:3F:FB:11:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66a1126f-ceb6-364f-a3f6-c6102220849f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f4:68:b0:42:47:13:1c:00:76:b4:1d:5a:e4:19:b9:3d:50:
b6:f9:c4:1d:46:8a:ec:ac:79:f3:67:5e:a5:dc:68:13:18:2f:
18:5e:c3:c8:6f:ec:ed:c3:28:f3:f5:74:fe:70:e7:36:08:2d:
f4:10:b7:1f:83:72:64:2a:7d:a5:00:c0:a7:e1:ee:71:c8:07:
ff:57:a8:7a:ba:88:82:0a:aa:54:91:4a:44:ac:f4:0a:a1:72:
44:45:a4:4c:3a:58:0a:22:94:4b:90:69:1b:b0:ed:b4:d7:4c:
4e:a3:c1:0e:d0:84:40:b4:3f:10:12:43:b7:22:16:d8:09:0c:
5b:81:a5:1e:59:05:03:86:af:74:c7:dc:79:c4:a3:e4:50:1d:
8b:f6:24:36:af:33:1d:18:2e:38:74:be:6c:3b:76:d5:69:51:
7d:58:48:43:41:3d:0f:01:7e:df:e9:60:86:2a:76:98:46:7c:
f0:59:dc:da:d6:58:00:88:d9:e3:c3:56:19:f6:a4:ec:cf:f0:
60:45:88:eb:d2:f6:da:c1:ff:23:1c:5d:60:72:96:4b:8b:d6:
cf:2f:39:1f:63:f8:e6:7a:3c:7e:35:8c:36:91:e3:04:11:71:
8c:d5:35:d9:ba:bc:d5:d8:24:3f:be:76:5a:6a:00:ab:97:22:
cb:24:6d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:10 2025 by rpki-client