Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f3a8241-34b1-3c3a-9189-1ad6e6d3df7b.roa
File: 7f3a8241-34b1-3c3a-9189-1ad6e6d3df7b.roa (raw, json)
Hash identifier: wJLT8Yx+IW7CfmUwMGu6+BDIMcQZkNUyJcm8HSNkQoI=
Subject key identifier: 66:5D:24:B0:B2:D1:AB:1B:34:1D:BB:EE:A7:AC:E9:50:C1:B5:ED:E1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2289AF0FC885506CFD6580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f3a8241-34b1-3c3a-9189-1ad6e6d3df7b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.72.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:22:89:af:0f:c8:85:50:6c:fd:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=81c09a49-a548-4a93-8464-8d26e0dc5569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:c1:c9:d9:e9:f4:ab:a2:4b:65:e0:a3:7c:
72:12:53:d9:3a:6b:3a:02:74:ee:ed:d4:4c:28:ca:
87:b4:be:73:d7:e2:51:28:ef:d0:b5:83:87:2f:21:
72:d0:5a:bb:bc:81:f2:93:aa:04:dc:5f:e9:8a:2e:
34:09:d3:58:71:11:76:7e:4e:1e:5d:44:9d:ea:da:
08:ef:b0:d9:9f:78:a2:82:d0:55:a6:6e:bf:ad:b3:
7b:46:03:28:88:1e:5b:b8:d6:a1:4d:99:19:01:f7:
63:e1:56:3c:18:86:63:d9:4b:40:de:79:50:32:6b:
71:11:a8:8e:3c:2f:8e:cb:97:14:d2:89:59:4f:a9:
7f:8c:82:61:71:44:d1:15:11:96:11:07:81:73:dd:
b5:d2:a2:c9:2e:c4:0b:e9:db:83:1b:e3:a5:37:6a:
cb:ec:b4:15:fb:cd:94:73:46:87:4e:31:c6:43:97:
bb:f1:d5:83:fc:16:f7:b5:bd:0a:06:50:62:3f:ed:
36:90:1e:ca:ce:c6:9d:4c:9e:7f:6d:4b:32:6f:2e:
9a:4d:5e:92:71:49:97:43:f5:86:bf:b2:5a:f5:f0:
eb:12:24:9c:c5:0b:e9:b8:2a:5f:f5:69:75:f3:ec:
d9:b5:31:6d:dd:37:ad:f7:28:b6:c2:60:91:3b:a1:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:24:B0:B2:D1:AB:1B:34:1D:BB:EE:A7:AC:E9:50:C1:B5:ED:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f3a8241-34b1-3c3a-9189-1ad6e6d3df7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:cf:f9:18:5c:53:78:b7:50:c0:89:8c:72:c3:48:57:89:7d:
d7:c0:ca:c3:c3:23:ea:b9:c6:e5:cc:fd:cf:99:58:39:13:23:
6c:a9:de:47:be:71:68:6b:6a:62:9b:a5:36:05:da:7b:b5:2d:
28:0f:1d:74:94:b4:48:26:38:b4:15:45:ad:99:b2:fa:f2:c6:
99:ce:3f:84:08:a6:c1:42:8e:4e:b1:ec:56:a8:83:e4:f5:b1:
eb:5c:18:56:56:89:90:e2:96:74:d8:ae:c2:b4:c4:25:21:d3:
28:c4:7f:6b:92:3b:92:b9:a8:cd:0a:11:83:3e:d7:61:f9:7a:
fa:f8:21:41:29:ff:51:02:5d:68:60:2c:54:b3:47:e4:9a:18:
48:ce:22:e7:e8:08:37:63:45:17:11:5b:4f:46:f5:21:7c:de:
10:91:ac:3c:39:3b:eb:f4:9b:11:ac:14:c0:bc:be:a5:55:e7:
07:ff:19:e5:b4:3e:77:da:21:da:e2:15:de:8f:23:22:2f:57:
8f:f6:c5:4f:d0:b0:cd:ee:a7:7a:6c:67:85:f2:b0:f3:92:53:
bc:9c:14:cc:89:71:7a:1f:5e:60:c0:3c:4b:ee:f9:5a:9e:d8:
bb:ec:2e:1f:b7:68:51:40:37:f6:f2:d3:09:f0:88:2d:46:60:
37:0f:ee:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:33 2025 by rpki-client