Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/735b5e5b-273a-3b65-8e7a-2420ca09016f.roa
File: 735b5e5b-273a-3b65-8e7a-2420ca09016f.roa (raw, json)
Hash identifier: OvI205SPe4f8+tSMWUm1E3NNEJ+GW+RmycUQ1Cea5MY=
Subject key identifier: 60:2F:15:A1:CB:A3:DC:C0:21:E4:95:41:12:D5:5B:16:B3:FC:6C:6B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309ECDB584CC49621B2B0DA20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/735b5e5b-273a-3b65-8e7a-2420ca09016f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.133.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:db:58:4c:c4:96:21:b2:b0:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b38ece15-ca63-4a06-8a56-811a426b331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:08:51:3e:6c:11:48:73:4a:6c:38:e2:e4:
f1:13:6c:3e:a2:58:a0:99:11:e6:06:28:ae:e0:62:
d5:50:46:8f:4f:43:0c:76:36:b4:9b:4a:9d:e6:eb:
5a:0d:92:72:89:4b:ca:3d:a4:f1:c2:ac:99:f5:18:
23:8f:2a:c8:e7:55:78:a0:82:d3:fc:32:c5:c1:d7:
85:8f:f5:3f:96:76:2b:14:d8:34:49:0b:d1:28:a8:
d5:9c:17:e0:a8:9d:48:68:92:91:13:fa:a1:5a:dc:
5a:3f:8c:85:db:1b:0a:8e:63:db:a9:db:8f:d8:08:
5b:a9:76:ab:0f:ff:40:c9:da:5a:1c:f2:b2:71:ea:
6a:d1:f8:39:c4:9d:9b:d3:eb:e3:56:b9:bb:b6:ff:
7a:49:7f:ee:e2:ca:6c:fa:88:0b:4d:fa:58:d8:7c:
d1:d1:39:19:8d:2a:db:dc:39:99:34:f3:5d:f1:31:
2f:7e:c8:fe:98:79:e2:8b:3a:31:ea:cf:5f:79:5a:
dd:0a:55:92:0d:e7:e6:bc:07:ab:26:5e:34:59:38:
11:9b:af:08:08:e7:6e:4f:01:57:4e:41:df:b8:81:
dc:bb:e1:03:ce:8f:8a:f4:a9:2e:8d:36:0e:35:2a:
60:54:85:06:ec:32:45:40:72:13:72:e2:3f:cb:2d:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2F:15:A1:CB:A3:DC:C0:21:E4:95:41:12:D5:5B:16:B3:FC:6C:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/735b5e5b-273a-3b65-8e7a-2420ca09016f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.133.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:aa:b0:21:e9:d0:b0:38:31:94:93:49:7e:7b:1e:11:80:bc:
7c:8a:07:d9:7f:32:42:ff:f9:e7:4c:99:dc:0d:c0:cc:ea:60:
68:d0:05:85:d3:de:18:56:96:84:6d:57:4a:a0:82:19:be:fe:
af:a7:13:8e:aa:ea:3d:a5:9c:ea:de:b8:8d:fc:18:76:aa:e1:
69:43:0c:d4:f1:a1:eb:36:84:fa:e8:f7:10:7a:de:3d:5a:85:
bb:82:f6:f4:dc:06:a9:43:1e:82:3a:5e:f4:91:24:82:3b:13:
11:c8:34:fc:0c:99:c8:b3:3b:3a:0f:10:08:a5:e1:25:e0:e8:
f5:89:91:7b:ea:8d:60:79:a8:22:d1:07:d2:e5:52:69:bb:70:
1c:e5:cb:0f:37:5c:f1:8d:5d:6e:7c:60:26:39:31:bc:8a:b1:
3e:e6:d8:e4:fd:22:da:3f:6c:27:7a:03:ec:a2:02:d2:d0:29:
ed:8e:50:4c:17:88:db:b0:ed:e5:04:23:dc:cc:d1:3d:bc:59:
22:eb:c9:e6:f1:2c:29:ab:a0:b5:1a:9f:8e:50:57:4d:cf:a6:
8b:e6:6d:8b:3b:42:08:49:08:db:99:09:15:07:73:c5:84:e2:
e4:c5:14:43:3a:b2:e9:6f:e2:8e:59:84:9c:cd:07:7e:3d:a6:
8f:bc:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:12:34 2025 by rpki-client