Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ab86d0c-bb30-3127-af85-b4a7ebbd98c7.roa
File: 6ab86d0c-bb30-3127-af85-b4a7ebbd98c7.roa (raw, json)
Hash identifier: uc6RdyGOvkkQTNfDPc+9mNjJ0+6JIl1cqt6QsQklhFE=
Subject key identifier: CE:07:21:6F:41:CD:90:A9:79:EB:49:5A:0B:FE:9E:E6:4E:E4:B2:D6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F03ACA9BC730CBE99B6380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ab86d0c-bb30-3127-af85-b4a7ebbd98c7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.147.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:3a:ca:9b:c7:30:cb:e9:9b:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6ec54717-3fa1-46e7-b4ea-a02441ee8d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:7d:94:cd:06:2a:1b:56:af:a7:2b:2c:3f:
09:b2:1f:fb:c8:00:d1:54:60:87:0a:0b:5f:bf:ab:
81:06:4a:1d:fd:c2:95:7f:f0:8c:c7:d1:cf:90:b4:
b2:47:82:e8:68:37:d0:6d:22:23:2c:ce:0f:7e:a3:
fe:aa:c4:88:b4:b1:32:a8:28:29:77:92:65:ad:91:
33:73:69:17:e9:87:7d:1d:14:5c:26:63:85:5b:ce:
2c:6c:6b:6c:79:f2:d8:50:d5:21:bc:2c:bb:b9:3f:
ed:58:25:1c:58:53:fb:a7:39:81:00:62:b8:29:a3:
ef:6a:20:06:27:81:08:95:ca:0d:f7:93:ba:86:ef:
46:8a:b0:ee:49:49:3b:d5:8a:c7:ff:65:1c:ba:b2:
75:66:76:3a:c6:4e:90:19:c8:57:50:14:a1:37:5f:
1c:01:8d:f1:62:4d:52:ac:41:8e:61:16:83:f8:5f:
6d:30:a6:19:93:c5:dc:6d:75:5d:18:d4:72:ee:d6:
b9:ae:26:f9:d0:a5:a3:05:a1:f3:19:90:07:a9:99:
7a:98:14:a4:b8:19:f9:19:b5:4e:65:0d:5a:ab:18:
f1:84:9c:a8:ff:29:02:b8:b4:10:a2:9f:9c:c9:c7:
a6:a5:c0:c2:22:f3:19:ab:8e:0c:8d:99:17:37:16:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:07:21:6F:41:CD:90:A9:79:EB:49:5A:0B:FE:9E:E6:4E:E4:B2:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ab86d0c-bb30-3127-af85-b4a7ebbd98c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.147.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:5b:77:03:2c:01:84:64:20:a4:04:b5:92:c2:97:3f:2c:26:
3c:9a:e1:1f:36:58:c4:fd:2e:f1:60:43:9d:6a:48:e6:76:09:
a5:03:2d:40:d7:25:89:30:4f:3f:b8:90:dc:fc:ed:f3:2d:13:
dc:66:17:85:a7:e0:01:3e:2b:1a:c2:f6:72:3b:35:42:6b:d2:
d0:cf:31:a0:f4:40:6d:3b:1c:6f:67:85:d8:0f:24:5e:15:6d:
1a:cc:21:ff:8b:55:cf:be:d4:4b:c7:d2:67:93:00:b1:0a:3e:
81:8d:8e:c4:7b:73:da:d4:db:4d:d5:93:20:29:7b:e6:58:70:
b0:74:39:09:1b:bf:f9:00:6c:25:f1:f8:8d:5a:a0:83:c9:11:
2b:db:34:4e:59:38:e7:69:bd:1e:94:bd:1a:49:2b:fc:31:f9:
c9:81:93:67:1b:e6:74:12:37:f7:45:24:dc:b9:bf:da:e7:38:
a0:78:cc:ce:ac:fe:f7:96:fd:55:74:b4:7c:85:d4:68:91:bc:
4c:6d:45:a2:52:57:32:c6:bc:43:f0:ae:2e:b0:12:dd:5c:3c:
98:b6:18:44:9d:74:cc:66:81:a5:af:ea:73:ed:2e:60:71:1d:
df:45:bd:1b:a6:b7:7e:8d:be:7d:89:72:ef:ea:b9:a1:77:cb:
2e:98:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:26:33 2025 by rpki-client