Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85a34470-f7c1-30e1-ab87-f8a8cd0037b1.roa
File: 85a34470-f7c1-30e1-ab87-f8a8cd0037b1.roa (raw, json)
Hash identifier: jaP3zm5SPsP/k2N4y0tD7QanT6P0+TYw4dei9kbFwec=
Subject key identifier: 9B:A5:B7:49:02:34:90:0D:43:6B:3B:EE:54:07:66:06:21:28:B6:D0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F46969D86A64D6D7709580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85a34470-f7c1-30e1-ab87-f8a8cd0037b1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.139.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:69:69:d8:6a:64:d6:d7:70:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=036aaf28-24e2-4c80-a4a8-3dc504d402d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:81:46:c1:8c:b8:3d:ca:e3:b0:0b:1f:89:
a3:86:66:1d:f4:d3:cc:4b:10:7f:cd:06:20:44:bf:
ce:26:e8:75:73:68:2b:d1:c2:63:1e:30:3b:58:3c:
dd:eb:1d:6c:88:c2:ae:da:80:9e:f7:f5:ca:0b:b3:
82:ac:15:9d:5f:97:51:81:4c:a3:78:8e:f4:fb:73:
cc:d3:c0:3b:ba:91:f4:de:b4:22:cc:05:3b:4d:e2:
e0:5b:96:ea:a9:00:0c:d8:fd:ae:b2:8f:35:e5:81:
06:a7:6e:85:f9:c9:f5:db:6a:8d:14:bd:01:3d:72:
b0:2d:1d:1e:61:d3:93:6b:ae:e5:07:bb:af:2f:76:
68:1b:18:f6:ad:44:de:ea:d4:d8:3a:b6:ea:76:47:
1a:27:07:fa:8a:e1:99:65:fe:d3:cd:96:a1:f0:e4:
6e:18:aa:bc:af:3f:62:61:3e:09:03:a0:51:95:69:
7b:9b:7d:43:fd:da:ff:ea:12:cb:c2:69:55:0a:fb:
b8:cc:65:7d:8a:a9:a4:cb:c3:3c:ca:c3:8b:c1:4d:
11:a0:fa:14:e8:7e:f3:f4:3a:d3:9e:1c:70:c3:85:
eb:7d:1a:65:07:9b:93:92:fd:1c:8a:ba:57:a7:94:
c6:ac:03:22:f2:60:12:95:a2:b4:10:03:35:6c:17:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A5:B7:49:02:34:90:0D:43:6B:3B:EE:54:07:66:06:21:28:B6:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85a34470-f7c1-30e1-ab87-f8a8cd0037b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.139.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:60:c9:6b:f5:c2:1d:b1:1c:b1:8a:ca:51:6c:fe:a2:e0:99:
07:45:92:15:b2:da:f2:dc:5e:5f:75:6d:4d:a2:91:2c:75:3d:
5a:c1:df:bb:95:30:0e:f1:08:66:fc:ac:68:96:88:6d:67:38:
58:a7:1f:26:96:9c:3c:33:d3:9c:c8:98:a8:d7:49:cb:0a:fe:
c2:f2:1c:38:63:a3:54:50:98:ea:09:b6:37:90:f8:b8:c7:4e:
a8:0d:92:fd:c1:66:7f:ac:56:fe:86:f4:95:07:2d:4c:02:1d:
18:5b:b1:01:c1:ba:2a:d4:c0:e6:52:06:38:23:3e:06:b1:47:
8b:aa:85:ab:e3:2e:9c:25:02:fc:23:35:01:aa:0f:c9:9e:67:
96:db:44:9a:52:5b:3e:f8:87:1b:76:7c:00:64:98:37:f4:8a:
43:11:88:9c:69:4a:ad:8c:7f:f1:6b:4a:7c:9b:f2:6b:35:d8:
81:9a:ee:71:ad:09:56:55:27:03:37:64:88:6f:ca:4b:aa:c8:
a4:76:06:13:4a:df:df:87:c7:8d:19:d3:25:82:5c:00:19:89:
9e:c2:37:4d:ed:0f:1d:67:d7:99:07:49:c9:00:61:9f:46:30:
ee:c2:4d:7c:08:56:4e:5a:1a:48:27:90:61:ef:c8:6f:b7:f5:
4c:f3:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:04:54 2025 by rpki-client