Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ff023b7-5b91-3243-ad85-49edd79defa8.roa
File: 6ff023b7-5b91-3243-ad85-49edd79defa8.roa (raw, json)
Hash identifier: 518yXKm3yk9ZMvLE9muRQUPOEXl2GYse3e0Fhjk042c=
Subject key identifier: 2B:2D:FC:EE:82:FF:0F:94:A7:64:29:C6:E4:32:98:8B:6A:37:8E:23
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A774C365EC7587EC73E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ff023b7-5b91-3243-ad85-49edd79defa8.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.156.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:77:4c:36:5e:c7:58:7e:c7:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=09735983-f1e6-41b6-9ec8-2c7b5585ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:8f:f7:96:15:db:e4:30:41:e0:4e:a7:37:
48:ff:9a:af:04:67:30:fc:2f:ce:82:5a:64:21:1d:
c6:a6:a4:4e:d8:a6:eb:a5:df:6a:d5:a5:27:a4:95:
df:85:29:a0:8e:78:2e:c2:10:1d:f0:30:13:a1:df:
21:52:6b:66:f3:f5:14:6d:0d:07:5f:1b:42:0e:cf:
d5:8e:cb:d7:f0:3b:8e:29:1b:63:b5:c1:70:2b:3e:
20:f2:d4:1a:96:a4:4f:7d:b6:ce:c9:de:fc:93:8a:
83:59:c1:f8:3b:93:bc:a8:54:fa:94:64:57:99:81:
00:da:f5:f0:23:58:5f:1c:77:b6:7f:99:53:80:b9:
1d:1d:e5:b2:03:10:79:49:15:1a:4c:dd:c2:45:e3:
bf:37:b4:b0:54:f0:ed:7e:e7:be:28:e8:4a:b8:71:
02:d7:59:48:14:39:65:f3:4a:85:11:76:ad:dc:8f:
39:1c:2c:0b:61:c0:af:02:53:de:f7:99:f0:2e:1c:
f4:0e:d1:4f:3e:cc:ba:a3:6a:00:f3:c5:2d:b1:a1:
00:13:59:42:c2:3a:66:5b:fc:36:d8:41:dd:9d:01:
ce:82:71:0b:d4:89:dd:a3:61:72:fa:23:8f:d5:98:
28:54:41:52:e2:ac:f7:e8:e0:68:07:6c:15:11:fd:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2D:FC:EE:82:FF:0F:94:A7:64:29:C6:E4:32:98:8B:6A:37:8E:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ff023b7-5b91-3243-ad85-49edd79defa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:d1:d9:e4:a6:29:25:6d:50:d1:15:67:a8:d2:0d:de:77:3c:
46:4f:da:e9:6d:3a:bc:0f:08:85:be:dc:2d:89:a3:00:4d:ab:
08:c5:0a:3a:10:96:1f:26:7b:b4:cc:a4:84:82:4b:e0:2c:85:
00:29:c3:79:c2:99:5b:60:ba:36:d9:4c:4c:30:02:7e:a8:d1:
ff:58:23:dc:85:45:28:9a:ca:a1:8f:80:d3:da:17:6c:d5:12:
a4:90:ec:90:f5:e9:f7:44:7c:50:f4:63:ae:ff:78:7a:c2:ac:
32:9c:76:58:31:9f:89:4c:3f:de:a6:b0:a4:43:67:3e:5c:52:
e8:55:8f:6a:9f:b3:10:c6:0d:1a:2f:3b:7b:de:b9:2c:c4:10:
4e:f3:36:b2:47:a5:6b:99:eb:45:88:ea:56:a6:64:6e:a9:b6:
24:d7:f1:f5:26:10:bf:b5:6d:95:93:32:10:b3:b3:d2:ac:ba:
cb:ff:f0:e3:07:14:d3:ab:c4:77:d9:12:a0:1f:fd:44:de:46:
cf:72:7b:93:82:6b:36:47:c5:aa:a6:af:1b:a4:97:32:d8:31:
45:c9:1d:92:8c:ca:79:b7:19:6e:cc:53:6f:3e:93:53:da:15:
dd:9e:a6:d1:7b:a2:ba:33:3d:0b:fa:c0:cc:d4:e1:b9:ce:3c:
e7:10:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:11:31 2025 by rpki-client