Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8628c0c7-985e-3099-bffd-692433fac3ac.roa
File: 8628c0c7-985e-3099-bffd-692433fac3ac.roa (raw, json)
Hash identifier: 8XjMTTDBxj9SRrO7lIL4DivAh/Ttp52rLbHPyCFCeYg=
Subject key identifier: EA:56:6E:3A:21:E4:68:03:94:FA:CA:26:4B:13:B1:D5:A6:DB:7A:0C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6A7D0630DFD177D68580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8628c0c7-985e-3099-bffd-692433fac3ac.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.137.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6a:7d:06:30:df:d1:77:d6:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=22876012-2792-4230-ab1a-94119ba9bd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:32:a5:0c:72:df:24:5d:64:3e:5f:de:2d:
81:42:eb:17:be:0f:46:bf:80:f6:71:7b:2f:fc:8b:
1c:52:cd:aa:e0:f5:c1:bf:24:b3:7e:ef:6c:aa:98:
67:d1:64:88:88:ac:1e:ce:08:52:4a:d3:bd:cb:1d:
4c:a0:39:9a:09:a6:34:57:52:7b:1d:f3:ab:41:a2:
92:3c:d7:08:3d:76:22:eb:d2:48:78:f3:3f:ca:38:
53:0d:57:d6:42:97:c9:14:60:cb:62:a3:02:21:31:
bf:1f:99:e3:cb:d7:bc:1f:bd:e0:56:0b:91:36:52:
6d:cf:ed:24:13:55:b1:84:cc:fa:61:f3:22:23:16:
c1:6f:3e:66:59:06:1c:bc:a3:cf:a8:d8:5b:f5:15:
99:4e:79:1e:b3:92:98:2d:59:0e:9a:25:c1:43:e8:
91:a4:8c:77:ad:dc:9a:45:1c:08:c1:16:51:4e:90:
53:b9:66:3f:0d:96:ee:40:d1:05:d1:8d:03:ad:af:
e4:14:6f:c6:95:f8:27:cd:36:19:9e:13:03:30:7e:
52:87:89:aa:ac:c5:74:68:cf:2c:74:9d:8c:36:ef:
8f:1f:2a:04:34:91:b8:8a:60:0e:8c:b5:c5:4e:58:
e3:b0:db:bf:26:6b:01:d7:22:73:d5:e2:85:39:ec:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:6E:3A:21:E4:68:03:94:FA:CA:26:4B:13:B1:D5:A6:DB:7A:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8628c0c7-985e-3099-bffd-692433fac3ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:12:a7:cb:c2:41:8f:71:e7:6e:62:ed:df:0e:f9:50:af:ba:
0d:75:1a:52:c7:e7:27:91:b2:2d:09:84:06:54:4b:df:1d:d1:
97:61:b1:d8:cd:e3:96:8d:fd:bb:e6:f7:92:67:70:65:fc:b8:
21:1f:fe:a1:b5:aa:78:5b:14:db:09:73:4c:ca:d2:85:9c:5d:
1d:47:14:e6:f9:f3:70:78:ef:52:5f:94:42:e1:f6:f9:45:65:
c0:37:f5:8a:48:dd:94:a8:1f:97:c8:4e:02:80:42:63:84:a8:
b8:ca:d4:75:4f:95:5c:2e:da:a7:47:e2:a3:9c:05:fa:18:65:
0d:87:c5:5d:95:e0:39:b1:d1:d6:a1:c3:40:26:7b:a7:fd:44:
17:46:d9:43:20:a7:45:bb:89:56:25:69:e8:f4:f4:6b:49:d7:
18:f9:19:02:fc:24:39:e1:41:d6:cc:95:1e:1c:07:71:79:db:
79:c3:36:01:0e:98:c0:74:fe:f6:5e:46:81:21:c9:d6:41:9b:
2a:bc:dc:18:d8:13:e1:0b:50:1b:65:42:0d:ba:fb:c8:7a:98:
97:78:73:ca:33:39:9d:60:fd:ff:8e:05:2b:2d:1f:53:e6:7e:
ac:67:46:d4:51:8b:d7:43:8c:a8:d5:6b:ed:e7:f2:11:81:3c:
9e:d0:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:50 2025 by rpki-client