Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a878172-4e57-3904-afa4-45569430263c.roa
File: 7a878172-4e57-3904-afa4-45569430263c.roa (raw, json)
Hash identifier: QrX78LXah5T3kSzJIBsvy9fqUePZynNSZgADAt8nszE=
Subject key identifier: 8E:05:76:F0:02:83:74:CA:5C:4D:1E:C5:5B:3F:3F:98:8D:6C:67:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F589B74818C2EA1D676BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a878172-4e57-3904-afa4-45569430263c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.64.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f5:89:b7:48:18:c2:ea:1d:67:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5aba3635-b77b-4603-a196-3c083132c2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:14:74:5e:85:32:f9:87:42:93:e2:90:2a:
42:5f:51:d2:0e:11:f4:fe:ce:e2:51:4e:01:10:ec:
f9:14:14:04:97:94:66:f0:3f:f7:ae:ee:0c:34:ce:
52:68:fd:55:23:fc:28:46:86:08:5f:fe:8e:08:cf:
f7:39:d0:da:e2:3e:00:cc:84:af:47:43:ff:ba:43:
6f:84:c3:70:58:fb:b6:cd:c1:da:f0:6d:c7:ab:01:
36:78:07:a9:d7:5f:cd:70:c1:be:c1:1a:45:c7:d4:
be:e4:97:07:ef:43:25:1d:59:bf:52:91:db:e7:09:
71:4f:3b:e1:4e:32:27:30:0e:b2:23:38:76:d3:f5:
83:a8:76:20:b4:49:4f:87:8d:76:f2:4d:01:a4:36:
18:4a:7f:8e:3f:5c:d3:ed:55:62:20:63:9b:71:6b:
dd:6f:c6:45:ad:54:b3:d9:bb:a7:3a:a2:a9:7a:b2:
5d:75:40:1e:9c:d1:50:01:52:e6:8d:87:9f:2f:74:
08:4b:a2:0e:31:69:e3:3b:4e:9f:4e:57:ca:ef:9f:
de:4f:8c:b7:e4:c6:ed:d6:cc:6b:5b:f1:18:3c:9d:
67:6d:83:00:54:1e:40:14:51:0d:bd:a9:9a:94:ea:
ba:7d:2b:75:47:16:c8:a3:f5:78:e0:f6:f8:91:fd:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:76:F0:02:83:74:CA:5C:4D:1E:C5:5B:3F:3F:98:8D:6C:67:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a878172-4e57-3904-afa4-45569430263c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.64.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5d:15:79:3b:d6:c8:a8:e7:80:6f:0a:22:27:03:b6:dd:d5:
37:99:c2:97:23:54:f3:10:c9:1d:a5:53:fc:59:b7:e0:d2:91:
3c:fb:2f:c8:d0:40:37:5a:aa:26:aa:b6:64:de:10:94:ed:ae:
20:6c:98:77:0e:d3:49:4a:0a:5f:ac:85:ac:e6:44:08:81:fa:
d2:0d:ff:fc:cf:0a:19:e6:07:6c:2f:1e:90:3c:cf:f3:d3:9b:
64:9d:70:4a:41:f9:88:44:1e:76:a8:28:08:18:1c:c3:22:dc:
67:df:01:83:c9:b5:4f:e8:73:73:64:3d:94:df:e8:99:fc:f5:
58:b2:fc:50:0b:eb:c6:54:21:44:28:c0:ae:1f:5a:16:6c:ce:
e0:28:1e:bb:e9:bf:d5:94:c3:cd:24:5d:e1:bd:d9:4e:72:17:
47:c9:e6:5d:df:b8:f0:06:31:5d:47:14:96:28:bf:08:04:b8:
fb:92:b0:78:bd:0e:ef:f7:2e:0e:e5:45:04:33:82:d0:68:63:
6c:9b:47:ca:b5:44:76:cb:e5:b6:bf:0a:7b:a3:be:b7:d6:e9:
eb:b9:75:1a:1e:03:75:00:0b:e6:4a:b0:2b:94:26:dc:b2:43:
2c:98:c3:e0:55:73:f8:dc:11:6c:2a:5c:e3:c2:b4:61:86:ba:
fd:5f:20:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:59:02 2025 by rpki-client