Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8474dc0f-2224-33ea-a8bf-82a6c229d905.roa
File: 8474dc0f-2224-33ea-a8bf-82a6c229d905.roa (raw, json)
Hash identifier: kHq3VBqAsxUMinHrpdQCSWsbqqbfzozIZWgMkkfVNWY=
Subject key identifier: 17:54:3B:A3:54:D0:DD:29:2E:AC:68:0D:F4:1B:1B:4B:E3:A2:14:78
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A09116CE5E507C485D0E480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8474dc0f-2224-33ea-a8bf-82a6c229d905.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.136.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:09:11:6c:e5:e5:07:c4:85:d0:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8a564032-4b9b-4360-a3d3-f6775747b5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:a3:91:6b:c0:3d:2f:08:3d:2a:c7:96:3f:
b0:94:0a:6e:9c:5f:96:b4:e2:c4:ed:b6:38:bd:6f:
60:35:bb:aa:a1:aa:88:42:be:95:55:a1:5a:66:53:
f4:0e:23:da:de:8d:d5:e8:3f:d0:d3:c3:2b:eb:36:
0d:f5:9f:76:fb:28:4e:0e:1f:26:39:74:d8:4f:76:
65:9d:c7:9d:c3:2e:f0:0e:15:df:ed:fb:11:e5:6b:
af:68:84:1b:7f:70:66:35:3b:17:16:94:f5:57:0d:
5e:13:12:92:c5:9d:97:e9:0e:d0:48:32:0d:62:5f:
28:5b:7f:03:64:3b:0c:78:29:11:b1:15:b8:32:4d:
77:8e:80:eb:a3:89:d9:92:83:e0:60:0d:e7:be:ca:
6b:1b:ce:1d:d7:71:f5:38:b4:fa:74:34:75:aa:6b:
68:b4:42:f4:2b:77:c9:5f:21:7a:b8:71:93:ff:7f:
d0:3d:e7:45:7e:5c:4c:b8:5f:20:0e:b8:45:03:40:
59:1e:d6:45:fb:45:9d:73:9d:29:b8:01:18:a9:3c:
03:eb:20:80:e9:f1:b8:5f:68:e2:88:02:c3:13:e6:
9a:4f:8c:d2:40:14:a6:f2:b5:e4:09:a8:4c:38:a2:
07:fe:c7:62:fb:1f:3d:35:e1:23:99:e8:14:16:cd:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:3B:A3:54:D0:DD:29:2E:AC:68:0D:F4:1B:1B:4B:E3:A2:14:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8474dc0f-2224-33ea-a8bf-82a6c229d905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.136.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:81:bd:3a:84:57:f3:27:50:6f:a1:b1:47:32:dc:e6:1a:a5:
36:f1:0f:b0:38:1f:cc:e7:4d:ab:9c:34:72:16:10:53:05:cb:
64:33:f8:17:b8:f8:0d:21:52:58:df:6d:b4:c6:2f:82:ed:6c:
2f:36:04:ad:de:72:c0:01:65:76:64:8b:10:78:87:5b:14:e3:
33:2c:c0:38:30:94:65:db:19:f4:38:b0:4a:3f:34:22:fa:c4:
b7:c0:e7:d8:39:e2:b8:7f:ca:20:a5:9e:60:ac:1c:3b:4f:11:
37:49:e8:26:07:62:db:aa:90:98:ec:da:5c:bb:fd:ff:24:ff:
dd:9c:31:6a:e9:ed:19:85:1a:79:90:90:c2:4a:e0:cb:a4:6f:
6c:42:82:6e:7d:63:81:dc:08:0a:f2:79:b4:27:96:53:53:31:
35:37:85:75:1d:e6:5f:94:54:51:a7:c4:be:f7:4e:f0:e4:1f:
94:27:c2:a8:74:e6:fe:e6:8d:f4:71:ab:d8:8c:f6:7e:a4:17:
e3:46:0c:7e:5c:bb:c7:39:8b:f5:38:f5:16:d2:12:85:7d:e2:
55:dc:a4:6c:a3:ec:e5:5f:87:31:e4:3f:d5:7c:79:08:05:09:
32:51:29:6c:da:4c:e2:40:f0:4f:bf:83:f1:d0:72:4f:2e:b0:
f3:5a:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:07:54 2025 by rpki-client