Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74b1f40b-e8b4-3a53-a329-e853d33f5bc1.roa
File: 74b1f40b-e8b4-3a53-a329-e853d33f5bc1.roa (raw, json)
Hash identifier: JTgf7PBwOCfjjXyVSCjzzo5p+yvSeA1jnfwR6frnJzY=
Subject key identifier: 78:85:50:DC:B6:06:93:4B:78:D7:FF:96:18:64:CF:4F:F6:96:2C:51
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285843B2A720AE3480D4DAA14CF780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74b1f40b-e8b4-3a53-a329-e853d33f5bc1.roa
Signing time: Fri 27 Oct 2023 21:00:14 +0000
ROA not before: Fri 27 Oct 2023 21:00:14 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 19527
IP address blocks: 34.1.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:b2:a7:20:ae:34:80:d4:da:a1:4c:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 27 21:00:14 2023 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c35aff03-00c2-4d1c-8b43-8e04543a7502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:c9:56:2d:75:52:fd:c9:12:1d:4a:32:01:
ee:34:b5:9b:51:77:f1:d0:51:96:9b:7b:1d:2d:de:
de:1b:02:54:95:f5:80:7d:58:83:01:7c:ac:d4:70:
ea:b1:27:0b:06:a8:90:dd:94:99:57:ad:ff:f0:9a:
94:7c:f0:0f:c6:26:a5:8e:84:5c:03:cf:05:77:ea:
ce:2d:4b:4a:0c:31:76:db:0d:30:19:03:58:2c:62:
29:ca:1f:ce:27:86:49:12:31:a3:dd:59:42:5d:e8:
45:ec:49:03:06:55:ac:35:55:64:f8:f4:1b:a4:49:
2a:c9:46:e7:6d:e0:64:ab:c6:f4:63:b8:9c:0b:d8:
d3:21:61:3f:62:62:6c:31:4b:b0:51:37:71:51:8a:
19:91:27:bd:80:da:2d:6c:6e:ad:f6:2b:e3:3d:72:
4f:11:4d:b7:a2:19:7d:07:91:d0:4c:c8:2e:d7:32:
1b:91:e0:00:cd:41:75:59:65:ab:e0:38:56:d6:a9:
a2:d1:b2:7f:6c:2f:48:02:2a:ed:71:53:3b:f3:c5:
a5:ae:be:e6:52:82:b7:26:e1:54:d9:d6:70:4d:49:
16:5c:5d:21:22:5c:53:21:eb:cb:14:0d:af:64:50:
6d:f1:e8:19:f0:98:53:de:7c:86:af:e7:7e:fa:b0:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:50:DC:B6:06:93:4B:78:D7:FF:96:18:64:CF:4F:F6:96:2C:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74b1f40b-e8b4-3a53-a329-e853d33f5bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:c8:db:96:ee:48:e7:f7:16:56:b9:48:0a:28:74:a5:4b:08:
88:b9:cf:c2:23:97:fc:2b:be:53:ad:01:33:c7:41:2e:35:4d:
a1:3c:30:d1:03:ce:d7:08:c6:a4:46:6a:f4:63:84:71:3a:31:
ee:86:d5:a9:32:3c:70:af:d3:6a:d4:ee:7e:a7:67:2c:04:68:
3b:38:fc:76:9a:ed:34:0c:90:89:ee:35:0d:59:ea:9a:e2:0e:
56:ff:e3:ad:ea:9f:2f:3e:d7:7c:80:91:f7:9e:7c:79:39:2a:
01:7c:94:0e:aa:31:19:84:ce:b5:8f:a1:a9:af:6a:2a:dc:16:
fb:d3:e8:2e:b6:cf:24:9d:74:74:7f:0c:3a:00:db:e1:06:82:
59:6c:ce:f5:cf:81:e3:0f:76:27:c0:81:5c:d7:fb:80:0d:f4:
b7:7e:a4:bf:f0:0f:38:51:6c:72:e5:5f:50:13:d2:cb:cf:fc:
48:22:b8:4c:3b:d4:57:1c:13:38:d6:54:09:d0:d0:3e:37:28:
9f:6d:1f:1e:cd:b6:87:72:7d:b0:04:0d:db:ea:db:f4:16:bd:
0b:20:2c:c9:3a:e3:e1:4e:b2:48:c1:82:f0:02:8a:ae:e9:ce:
ce:90:49:48:6d:7e:f5:20:2c:3f:fc:f1:a1:04:b4:cf:1c:e3:
81:ca:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:26:30 2025 by rpki-client