Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8343ec7b-3dd9-3b15-9c7c-742a2e3ec7bd.roa
File: 8343ec7b-3dd9-3b15-9c7c-742a2e3ec7bd.roa (raw, json)
Hash identifier: hu5ojeI0b+QMmD+D6seBxMSw/OcnJm301AThOwL8v7I=
Subject key identifier: 16:17:39:F6:D7:95:19:1C:66:74:6E:7B:DA:25:4C:C8:C3:AD:77:A5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A18050B5E7EA31D0F3908C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8343ec7b-3dd9-3b15-9c7c-742a2e3ec7bd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.68.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:05:0b:5e:7e:a3:1d:0f:39:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2d580a1f-7172-43e0-bf02-28f1a986e55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:f7:e3:ee:77:65:af:21:e2:71:ba:eb:56:
27:44:84:3d:84:3a:b4:5b:23:60:14:4d:06:e7:fa:
3a:aa:7e:74:9f:d6:85:aa:3e:89:35:70:41:e4:48:
86:31:21:59:53:6e:7e:32:9a:8b:17:83:ab:f1:1a:
54:fb:19:fa:be:c8:2d:6d:6f:b9:35:71:86:a2:ab:
52:36:f1:67:81:00:02:37:e5:01:16:72:f3:92:fb:
75:57:01:2a:27:c0:ef:b9:02:51:11:6e:ab:54:f0:
67:01:ab:3f:51:d8:90:8c:fc:30:60:51:a6:fd:10:
e9:bc:6b:03:f0:00:28:53:b2:81:56:6b:e1:6f:92:
70:be:28:62:1f:18:b7:95:ae:ed:22:cc:2b:3f:07:
57:90:11:13:47:1a:34:bf:ae:10:41:bf:ce:f7:38:
4a:79:9b:d9:41:40:b5:57:04:a4:8c:0b:82:11:9d:
86:f9:06:b3:58:98:7b:89:61:e6:08:bd:80:10:e2:
34:b5:63:8d:46:a8:80:72:0d:fa:9d:4c:dd:09:1e:
be:e3:53:ed:52:0c:82:6e:c3:be:5f:4b:60:b5:9e:
ba:ed:55:3b:0e:59:f5:0b:38:87:e7:27:24:42:68:
88:53:a5:fe:1c:9e:95:3b:f7:b6:bb:92:2f:4d:37:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:39:F6:D7:95:19:1C:66:74:6E:7B:DA:25:4C:C8:C3:AD:77:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8343ec7b-3dd9-3b15-9c7c-742a2e3ec7bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ab:d4:12:ac:b1:cf:a6:97:df:3e:f0:5a:40:8e:3f:1b:4f:
42:f2:1a:1a:f9:93:7b:1a:31:84:ec:d8:b6:c7:56:5e:2c:ea:
08:d5:68:24:6f:ca:16:b6:1c:a6:86:e2:6f:78:03:d2:ce:d0:
b0:45:40:a6:ed:5b:2a:43:cd:a5:28:5a:44:2d:3b:f8:69:4c:
a4:b2:74:9b:e5:2a:59:50:e0:cc:7b:49:63:7d:77:81:bc:28:
4e:ce:99:d7:2c:c8:8a:35:3e:e5:81:7e:a0:89:cd:cb:8e:e4:
e2:f0:7e:f4:f3:68:4f:c0:ce:00:d2:11:6f:e6:11:b1:f4:34:
96:df:ac:d1:bb:83:9b:bb:8b:69:0b:2a:03:64:17:85:31:77:
b0:1c:e8:30:58:cf:7d:07:cb:4a:22:aa:fb:ee:10:3e:be:dd:
f4:56:5f:d2:af:8c:62:9e:d3:39:bb:2f:a0:d4:60:91:60:65:
3d:88:d4:4c:7b:88:ea:f2:bd:1d:48:28:a9:6f:cc:91:4e:d4:
5f:8b:0a:a5:a7:53:13:75:25:3e:2b:be:0a:92:84:e0:e9:dc:
e6:d4:87:d9:c0:d9:9b:6a:de:4d:2d:c6:68:51:0a:fb:2d:43:
3c:76:1e:57:5e:00:17:2e:4e:9c:47:6a:37:84:64:11:9a:6d:
97:b3:c2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:14 2025 by rpki-client