Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d26c2b8-5978-3449-8227-ad78e0bf3fc5.roa
File: 7d26c2b8-5978-3449-8227-ad78e0bf3fc5.roa (raw, json)
Hash identifier: 6B1Hbf3TIlM6FBFh2yS9jiGpe3kxpU4d2V5hDVUcfmo=
Subject key identifier: 94:6D:E9:C2:66:AD:17:E3:3C:D7:80:22:D3:31:05:EC:89:E9:0B:6C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6C0DA15F755C937D36C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d26c2b8-5978-3449-8227-ad78e0bf3fc5.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.88.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6c:0d:a1:5f:75:5c:93:7d:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=7dabe5e8-d3a0-47a6-a2b8-8bb37e530c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:ef:b9:1e:24:00:d5:8d:91:78:9d:12:9c:
1f:3b:14:de:28:95:0a:e9:68:bf:ac:f8:98:bd:d3:
2a:26:eb:72:4e:0f:a4:9b:75:26:82:8b:87:95:d9:
2c:6b:47:51:08:01:b9:8c:80:e6:57:65:2f:66:39:
a0:e7:f9:f3:8f:b7:24:cc:3f:e7:e7:44:9a:92:26:
25:cc:a0:81:2a:70:49:60:17:f6:78:56:82:00:0e:
92:a1:02:d4:10:e5:8a:3b:ea:b3:e8:85:2a:9f:e3:
05:d0:d1:da:48:e5:81:cb:5a:af:86:dd:7a:e7:fb:
86:91:8d:9f:04:6a:c7:90:e5:e0:c4:09:20:1c:23:
0f:f4:df:65:93:9f:b7:85:49:6d:72:09:c4:f1:28:
fd:f2:33:68:98:aa:54:be:00:4d:33:d5:6c:ec:d1:
3c:8c:c0:55:c5:fc:76:cf:9b:6a:64:67:97:89:37:
46:02:a6:65:f7:e7:de:96:52:4a:5a:f2:1f:9f:eb:
8d:55:a5:f6:f0:76:d6:3b:93:fd:41:40:ef:19:79:
d4:2a:57:8b:f3:53:d0:1b:12:28:50:b7:26:90:b4:
4d:5b:23:f3:8b:b9:ba:0d:36:d5:b0:e9:2d:89:92:
db:56:56:47:6a:f5:fd:74:e5:c6:e5:92:9f:6d:22:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:E9:C2:66:AD:17:E3:3C:D7:80:22:D3:31:05:EC:89:E9:0B:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d26c2b8-5978-3449-8227-ad78e0bf3fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:0a:c0:6e:74:38:fa:4c:66:6c:f2:50:9a:96:1c:26:0d:40:
0a:9d:b7:d4:ff:00:50:4c:c4:08:7e:db:b6:25:df:44:6a:11:
01:b2:af:3f:ac:bd:4d:f2:8a:24:2c:c8:7a:ca:c0:9f:bb:b5:
3b:6b:6c:40:e1:d4:a1:29:9d:71:2f:dc:de:d5:82:d4:7f:9c:
41:31:7d:5d:29:23:89:17:66:63:a5:2a:85:c2:19:e3:2d:c5:
9c:47:e0:af:15:a8:c8:34:54:0b:83:bf:fc:56:77:f8:96:58:
a2:0f:cb:e4:32:45:4e:68:91:12:be:1e:9a:d1:6c:8c:38:b2:
f4:e4:70:1a:eb:ec:5a:40:3a:91:df:42:96:69:c4:91:2c:31:
b0:8f:3e:b6:a6:97:0d:91:11:23:56:4e:5f:41:6d:85:3d:1e:
21:1c:d0:97:68:36:c2:64:e6:20:c1:79:04:ba:cc:10:63:5d:
da:42:d6:d2:d6:ea:f6:e2:7b:0a:f5:2e:0e:ae:0c:83:35:15:
df:33:77:66:fe:b6:fd:32:fb:fe:7d:ae:c7:55:b1:f1:17:ad:
62:4d:86:a4:fc:d9:1a:6a:dc:d2:fc:2e:f7:a3:30:16:24:75:
11:75:d7:1c:5d:31:cc:f1:29:7a:0b:c1:78:47:71:87:4b:75:
8f:17:45:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:04:03 2025 by rpki-client