Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b5e6805-cbaf-3769-9d59-f16eb9b9bd81.roa
File: 7b5e6805-cbaf-3769-9d59-f16eb9b9bd81.roa (raw, json)
Hash identifier: 3QSwZOeiO6GR3JT0thXs13I8A7lxjDhFoOflMrg4ALw=
Subject key identifier: 59:0A:8B:A0:9F:63:50:E1:38:74:14:C0:98:05:35:45:44:2A:15:FC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842517E96C9ABE1106000DF0E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b5e6805-cbaf-3769-9d59-f16eb9b9bd81.roa
Signing time: Thu 22 Jun 2023 12:00:00 +0000
ROA not before: Thu 22 Jun 2023 12:00:00 +0000
ROA not after: Sun 03 Nov 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.39.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:51:7e:96:c9:ab:e1:10:60:00:df:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 22 12:00:00 2023 GMT
Not After : Nov 3 04:00:00 2024 GMT
Subject: CN=1d8d55f3-4f8b-4d82-b3d3-1b18a2d54bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:55:cf:8a:e4:23:e7:69:4a:05:46:b2:72:
99:8a:b8:eb:ac:91:d6:f1:12:9a:bc:77:fd:55:95:
3b:68:07:c4:18:f8:1b:d0:f6:c9:4d:db:38:3c:e3:
d7:f1:60:fa:1f:35:36:d0:d8:de:90:21:2c:4c:f0:
1f:1a:93:d9:2e:10:c7:53:6f:6b:ea:b8:68:f2:06:
c2:59:d5:33:06:78:67:83:f8:82:e1:68:4f:31:28:
e8:1a:d5:74:c9:e2:9f:19:03:ca:56:07:ff:28:d0:
bd:92:e6:a0:1c:04:d5:17:b1:f2:03:50:2d:45:6c:
68:35:d8:2a:87:11:4b:f5:09:8f:da:85:d4:ed:07:
2a:98:eb:7f:9b:16:d7:1d:87:b7:7e:92:0b:f2:15:
df:7f:a2:f3:8f:98:2b:d5:a1:4a:2c:92:56:1b:04:
81:16:75:5f:57:75:de:26:8b:e6:3b:7a:b8:f7:06:
aa:3e:6e:c5:dd:13:93:ec:69:16:29:db:fe:cc:99:
81:25:07:37:d1:61:ed:e1:b3:7d:27:9b:ff:dd:d9:
4f:14:94:26:28:87:5d:65:40:ba:36:c5:ba:5d:e1:
f1:91:41:44:16:c5:99:f9:59:8a:04:09:04:ac:05:
30:2e:4f:20:0f:76:47:5d:35:dd:94:79:48:bf:d7:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0A:8B:A0:9F:63:50:E1:38:74:14:C0:98:05:35:45:44:2A:15:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b5e6805-cbaf-3769-9d59-f16eb9b9bd81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.39.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:a2:0f:a3:92:d8:1b:0c:75:dc:2c:4c:00:ce:59:a7:56:6b:
be:a3:65:d5:26:d1:7b:19:1c:da:4a:6a:bc:3b:79:f1:41:fc:
36:81:71:c4:d5:d5:b9:05:27:87:de:b4:a5:57:4b:5d:0a:43:
de:32:b5:73:47:d6:a8:1e:3f:f3:6f:db:df:b7:6d:29:7d:15:
54:b5:11:4f:c0:24:a7:01:e0:d6:71:cf:c2:8c:23:63:2e:24:
40:f9:5a:ff:ea:13:7a:ac:6d:6c:75:a4:cb:46:a4:7c:df:c3:
8e:55:0f:0f:7e:f8:3e:e1:66:b4:23:c5:20:23:b7:8f:6d:5c:
64:a0:ba:2f:70:7e:ab:2d:f2:3b:f0:43:46:82:21:cf:f6:39:
df:af:47:64:eb:08:4b:a0:69:60:66:b6:c4:4e:40:2e:92:38:
31:10:ee:cc:2f:12:18:b0:aa:8a:24:36:6f:de:ab:8c:80:fa:
0b:1f:18:2e:69:11:bb:a7:8c:49:d6:52:89:08:2b:e0:98:ae:
9d:36:ac:24:44:d2:e2:f2:29:f0:ff:a4:88:8f:33:da:3e:e0:
f4:2b:27:65:df:fa:34:93:ea:a6:04:8d:fd:67:b7:b0:42:99:
41:ee:0c:78:6d:e1:08:c6:c5:bf:db:6d:ba:09:a6:f9:96:28:
99:f2:74:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:44:25 2025 by rpki-client