Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/714e45f4-6da6-3bf8-a1bf-e9ab5641d525.roa
File: 714e45f4-6da6-3bf8-a1bf-e9ab5641d525.roa (raw, json)
Hash identifier: ZqDX1PGy2lihi6/v1MkLD1ZDt3Nl0g4eqvrop+Y6j5k=
Subject key identifier: 93:A7:D5:49:4F:E6:16:41:53:58:42:75:AB:F4:5C:07:A4:E9:8F:30
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0A96BFCD6B10CDC12AC380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/714e45f4-6da6-3bf8-a1bf-e9ab5641d525.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.72.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:96:bf:cd:6b:10:cd:c1:2a:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fa2c9633-bb43-4fa1-a704-52ebeacf4dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:c4:68:63:8b:67:8d:c6:06:85:0a:af:0e:
e4:51:4d:c3:e5:9d:2a:69:ce:17:9c:ed:3c:6c:33:
56:27:e7:83:9a:8f:b3:ab:8e:88:47:33:d5:35:58:
7e:8c:05:c7:02:0e:d2:4e:50:64:be:c1:c4:8d:2f:
e2:11:7e:6c:08:5f:1f:5a:32:11:2f:93:ef:71:24:
8e:53:4b:9c:14:1f:41:96:4b:14:b5:5e:92:a4:90:
4a:94:e5:0d:5c:3e:2e:07:0b:9b:2e:97:0d:f7:e9:
d2:2c:0d:6b:16:5a:fa:f4:b3:42:e1:10:10:f4:1b:
04:5e:df:fa:38:b2:48:e2:b5:12:97:7a:77:8f:ea:
59:42:dd:f2:b1:ba:1f:fa:a5:d0:41:ca:0a:1b:86:
b2:10:50:22:a5:fa:c6:ce:cd:13:bd:8d:24:94:fe:
de:a6:9a:09:34:c4:c3:c3:0d:49:7a:6d:65:bb:45:
55:7c:46:cc:a9:1a:7c:5a:46:a7:1a:e3:40:c3:4d:
3a:34:0b:4c:1d:5c:d5:b4:71:02:d7:4e:c2:d6:f1:
46:9b:af:54:8b:72:27:be:af:36:3a:2c:32:33:b5:
6c:69:45:d6:c3:0e:24:d9:cd:66:31:55:e1:8f:93:
ab:bb:a3:22:93:c9:d1:df:48:63:dd:cd:f5:8b:37:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A7:D5:49:4F:E6:16:41:53:58:42:75:AB:F4:5C:07:A4:E9:8F:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/714e45f4-6da6-3bf8-a1bf-e9ab5641d525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a3:34:98:af:75:55:74:fb:28:39:e6:51:2c:3c:fc:4d:d8:
36:0a:95:7b:25:f1:03:8e:25:bf:cd:56:99:24:f0:b7:57:04:
bb:a2:41:33:2d:c2:a6:4a:f0:4d:fc:08:97:90:6e:95:5f:9e:
a0:06:e5:c9:aa:bc:f2:9b:d6:e4:c1:8c:35:a0:08:ff:03:96:
2c:e1:a1:30:6c:51:b1:af:9b:d3:a9:fd:3f:bc:1d:9e:17:ee:
98:e4:d0:33:3d:df:31:d9:08:a2:71:6d:8f:ed:65:93:f5:da:
50:9d:78:bf:40:47:7e:f2:1b:36:cb:7c:a8:36:2c:1b:a9:78:
c4:c1:76:67:42:70:02:41:75:61:7d:0b:ac:40:7d:7d:ac:7a:
18:16:25:8e:c6:51:48:70:13:3c:d2:10:40:d5:82:51:17:33:
65:03:1b:6a:3d:36:ae:5a:c7:7f:1f:d2:53:96:7c:ab:70:48:
5d:c0:c2:e8:53:e0:11:4b:7d:6e:5f:e1:56:a4:97:27:6d:a4:
13:ce:5f:3f:d6:40:8c:50:9b:3e:ba:ca:1c:13:15:89:9f:da:
27:0c:43:2d:f9:1f:fd:8b:e3:4f:f8:fa:82:62:02:5e:b8:6f:
fb:d3:d4:30:c6:58:14:b6:fa:aa:2c:54:73:26:75:30:64:7c:
e9:b8:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:47:31 2025 by rpki-client