Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7656dee9-cdcb-3343-91a7-febcc27dc5c1.roa
File: 7656dee9-cdcb-3343-91a7-febcc27dc5c1.roa (raw, json)
Hash identifier: Q7TOy/seRs0YiRXpKRw9isn+GOqM/MgkBLu95mO7C/8=
Subject key identifier: 60:1F:A7:F8:C4:DB:F7:63:3D:79:42:08:29:35:17:DB:A7:59:02:1A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0EE505473A8315BE042350
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7656dee9-cdcb-3343-91a7-febcc27dc5c1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.142.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0e:e5:05:47:3a:83:15:be:04:23:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c4f3eb22-f065-4caf-909a-e9251f5ea655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2e:f1:32:d5:fd:7d:2a:3b:12:39:bd:08:3d:
9f:1f:94:f2:f0:e7:72:d1:c6:3b:06:99:9f:25:cc:
3f:d8:15:ea:4a:d8:8c:27:44:76:0d:af:ba:e2:22:
07:21:5a:31:0f:58:82:b1:78:3d:a5:ea:a7:d2:fa:
a0:e3:74:1d:9a:2d:41:49:51:07:87:81:30:d6:2b:
49:5d:3e:a4:f6:fd:c9:5e:bc:a6:df:02:e8:e3:6c:
ef:6c:5b:8a:f0:f1:da:ac:44:7c:b9:ae:da:63:11:
53:d7:1f:3b:a2:a7:7e:34:2a:51:55:85:ef:52:b5:
a5:9a:35:b2:66:19:0c:33:9f:f4:9b:e0:d9:22:75:
bd:6f:46:63:3f:b6:eb:9a:0b:c0:9c:81:1f:14:20:
18:c1:94:e1:e1:86:a9:3b:7c:76:98:f4:72:9c:41:
44:e1:af:e0:d2:c1:74:3b:58:c6:41:38:ef:2f:a0:
d6:34:36:fe:95:21:30:53:71:fd:8c:5c:10:16:98:
d7:eb:81:67:f0:ab:89:88:c4:76:1a:1c:00:81:a9:
85:8d:25:32:c7:cf:d3:5a:47:a9:53:61:ef:d0:eb:
75:bf:10:c4:04:82:09:a0:de:7f:19:d3:f1:de:60:
82:19:64:c9:aa:81:7b:01:ec:34:5e:2c:e6:05:cf:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:A7:F8:C4:DB:F7:63:3D:79:42:08:29:35:17:DB:A7:59:02:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7656dee9-cdcb-3343-91a7-febcc27dc5c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.142.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:fd:f5:1f:71:3c:2f:2e:0c:5b:96:4f:b7:fc:70:0b:9c:20:
30:6e:e5:82:66:56:6e:a0:dd:9d:98:43:11:87:bd:a8:ad:2e:
2c:cf:74:c2:94:06:63:3e:3b:5b:67:ac:6a:b4:5c:a0:02:48:
9b:f1:02:a0:66:38:52:0d:59:f5:a5:8b:87:1f:ce:47:3b:51:
ae:22:27:e0:10:d8:db:2d:89:1d:0f:e5:41:97:2a:41:d9:7e:
e8:c6:d7:45:c1:02:44:35:30:47:2b:bf:0c:2c:4c:07:3e:fc:
8a:66:6d:1f:7a:f8:b4:e9:fa:ab:0e:ca:f9:82:45:8c:0b:73:
5d:eb:a5:75:9c:ee:8e:30:46:d5:0b:64:ea:94:37:e0:b5:cb:
33:d7:1a:57:37:b4:c6:fd:56:c9:77:39:28:a3:ea:d3:17:4b:
6a:1b:96:14:aa:35:9a:1f:fc:6f:24:05:11:5d:8f:23:8f:a7:
ce:77:0a:92:60:11:a6:89:9d:08:4f:17:b0:0d:a3:33:f6:f5:
21:66:ab:7b:5b:45:c5:80:48:e6:a0:0b:d4:a3:55:cc:c5:1e:
90:1e:e4:44:49:4d:c3:eb:db:68:54:65:5b:23:1f:78:d3:74:
6b:0d:67:2c:26:5b:2f:56:cc:38:b8:9c:e3:c9:47:cf:6d:66:
20:74:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:29:07 2025 by rpki-client