Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8292a670-a454-30a5-8ab6-6d44b28a68fd.roa
File: 8292a670-a454-30a5-8ab6-6d44b28a68fd.roa (raw, json)
Hash identifier: se/lK+YNaWRvU385wKocYVDf/d7qxXSYc/5w7y5jYJg=
Subject key identifier: AD:B6:24:A2:85:02:62:38:79:94:B4:40:FC:CB:D3:12:BF:E6:12:89
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583D5BF2D2604ADD7134F1765B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8292a670-a454-30a5-8ab6-6d44b28a68fd.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Wed 26 Jun 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.120.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:f2:d2:60:4a:dd:71:34:f1:76:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Jun 26 04:00:00 2024 GMT
Subject: CN=af38f1b3-62a2-4373-b8e9-5a3a5e655964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:99:2e:d7:2a:24:0f:7b:66:81:f6:59:18:
89:6f:b8:c3:90:52:fa:48:5b:52:58:18:9a:52:cf:
50:28:d6:d6:7f:cc:9f:a8:2e:7c:ae:8b:7e:be:d1:
f9:23:39:f2:50:45:8a:ba:e2:da:37:77:8f:76:52:
0e:dd:2b:2e:ea:6f:d8:6b:bf:a5:1a:96:34:be:64:
6f:06:f0:bd:5f:a3:25:65:44:2c:0f:7a:b0:fc:11:
92:79:21:60:9d:6d:a4:ca:0c:0e:d8:f4:5d:b5:0e:
12:a8:2c:ac:17:d6:8e:8e:18:7f:49:29:54:5f:ce:
6e:e2:75:36:5b:13:38:2f:01:f3:c1:8b:2f:8b:90:
36:69:d9:5e:7a:aa:f3:88:20:e4:2d:60:2c:5f:14:
8a:b3:fb:44:09:3f:93:61:ed:2c:68:b0:42:de:1c:
84:25:49:e9:4f:6b:11:56:5f:a2:ba:5a:3c:63:ab:
4f:d0:e2:53:43:d2:42:34:9e:b0:2b:71:00:e4:c5:
e4:80:18:73:3b:c0:ad:ae:92:d8:c6:f1:42:01:5d:
4a:2b:b1:de:0e:ea:ba:55:af:df:2b:39:de:51:7e:
08:76:16:eb:a3:6f:9e:c2:ce:ab:6e:8a:73:00:1d:
d5:a9:f6:37:ec:64:2d:5d:7c:6b:3d:93:5c:73:a4:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B6:24:A2:85:02:62:38:79:94:B4:40:FC:CB:D3:12:BF:E6:12:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8292a670-a454-30a5-8ab6-6d44b28a68fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.120.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a0:05:97:fc:f7:89:8c:85:d3:36:e3:30:2a:97:86:6b:6c:
ad:9a:c1:62:31:28:c0:59:5c:67:d8:09:c1:b7:be:90:b6:9d:
73:98:98:6e:b0:b5:7d:b2:4b:24:c6:c9:f9:4c:6a:de:19:1a:
5f:8e:0d:b3:36:6c:43:5e:e8:95:17:9d:96:e7:91:18:f1:99:
47:db:57:3b:aa:a7:9f:63:02:9b:82:38:fb:c7:85:15:10:c4:
a5:3f:de:8e:a7:10:b5:ca:a3:b5:21:bf:a9:61:2a:91:e6:f7:
e6:40:37:05:bd:53:12:aa:e9:ba:b0:02:ff:10:86:0f:d4:37:
7a:a8:15:6a:27:50:7a:57:b4:55:18:03:eb:fd:24:5e:8a:7b:
ed:fd:82:69:85:5a:f8:a0:d9:ab:81:d2:4f:f6:60:42:2e:41:
ac:c8:53:c7:2a:f2:69:1d:30:7b:09:9c:ea:05:6c:ee:b0:ce:
18:c2:30:1c:d6:7f:2c:d5:ec:38:2c:f4:34:60:ee:ce:7e:a0:
db:96:0c:5f:34:ad:46:69:d5:17:ed:f2:e2:8b:e4:30:32:35:
99:d9:ad:90:a2:ca:66:e8:e1:46:7a:b5:37:ca:61:e7:f0:33:
3b:b5:bf:8e:75:44:cb:e9:e5:85:25:27:24:08:a2:4b:62:3b:
c2:33:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:47:44 2025 by rpki-client