Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e6037d0-b450-3c13-a930-5120dd8d9954.roa
File: 7e6037d0-b450-3c13-a930-5120dd8d9954.roa (raw, json)
Hash identifier: 5Z59YEGTD5N/SbUrdFvMqJyJClVp9+9znXBO/aaeQIk=
Subject key identifier: FD:CF:9C:9A:F2:35:D7:15:C2:E6:CF:53:F2:F0:AF:BA:9B:3B:CB:F6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A10466013D6A2B157DF6B40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e6037d0-b450-3c13-a930-5120dd8d9954.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.98.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:10:46:60:13:d6:a2:b1:57:df:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=eefd162b-1014-470c-92d8-5dc1007a80ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:bd:98:33:94:67:c5:45:f5:79:e0:d5:bf:
16:e7:98:1a:6f:37:7e:aa:61:c2:e1:1c:6f:f9:5b:
77:bd:a1:20:59:dc:53:aa:dc:3e:50:b4:3f:36:0e:
fb:ad:ee:7e:01:ae:df:9b:f9:19:2f:55:c4:b0:2c:
e6:43:0d:92:a6:76:ac:a0:c9:d9:19:ed:87:92:ae:
35:e4:94:2d:a7:70:01:8a:76:5d:8f:c3:59:bb:2b:
8d:6b:18:48:a8:4f:ef:76:57:5a:be:db:f3:53:e8:
07:6e:0f:55:20:19:be:d7:70:60:2c:38:c9:af:6d:
bd:3a:ba:08:a6:b5:92:a3:bd:0e:ff:8a:93:ce:e1:
a6:10:a3:e0:f5:52:3a:78:04:83:f3:5c:a5:49:53:
28:59:66:a0:3b:2f:67:8a:02:1a:91:6b:53:98:d8:
43:ed:ee:a2:d1:0e:36:cd:cb:fe:0e:4e:d6:e5:a1:
19:39:8c:56:bf:35:64:01:dd:0f:f1:ef:2b:bf:7c:
69:90:fb:6b:0f:32:7c:47:3c:ba:79:03:7c:a1:4c:
09:0c:54:ab:ad:7e:d8:f0:6e:e8:b6:be:51:a8:64:
4b:73:ce:0e:7e:47:d3:52:ca:3c:aa:0e:a0:77:79:
06:57:04:83:a2:37:78:06:12:6d:3a:d5:14:00:2c:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:9C:9A:F2:35:D7:15:C2:E6:CF:53:F2:F0:AF:BA:9B:3B:CB:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e6037d0-b450-3c13-a930-5120dd8d9954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:0a:4c:3c:28:2c:b0:88:79:3d:25:05:60:34:ca:84:c0:45:
13:e6:e5:fc:d3:f6:de:a2:9c:87:fe:08:8c:f5:38:be:dd:3b:
c3:64:ff:87:52:86:f5:63:9c:0d:64:e9:7e:63:b2:14:a0:f3:
a3:6c:10:28:71:43:05:fc:d6:03:aa:27:09:29:56:47:16:fb:
bd:55:71:69:3e:15:3e:75:cd:86:7a:bb:28:da:d4:8a:d3:5d:
ed:bf:4c:1c:7c:0a:51:06:ec:55:73:98:0c:72:21:92:25:82:
10:cd:9c:c1:6d:37:7b:f2:8a:c2:6c:94:ad:0e:8e:20:79:98:
b0:d4:4d:de:da:1d:ca:1e:96:60:0c:94:af:c1:93:ed:6c:23:
e4:62:ce:58:f1:1a:b9:0c:c0:b9:6c:ee:2c:46:46:df:de:0a:
3a:c6:5e:d9:3a:b0:ab:a5:d1:8e:31:67:12:08:51:81:bb:fb:
1e:a0:ba:5c:83:de:41:ea:ac:eb:22:20:4c:a2:06:3f:05:ea:
12:f5:6e:86:d0:98:0c:cf:12:a3:02:a3:92:3a:81:55:4c:22:
b6:f1:c7:8d:98:31:ee:6f:0f:90:6d:65:d0:8c:fc:42:5a:ba:
ce:63:9b:72:63:b7:96:02:e8:7c:6a:bf:fa:40:bf:c4:be:59:
51:0d:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:48:56 2025 by rpki-client