Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86427a0b-a313-3bec-aac8-31c29b310ee5.roa
File: 86427a0b-a313-3bec-aac8-31c29b310ee5.roa (raw, json)
Hash identifier: cD85dFwPTzlJxM0hM0XEdtN+s4x1d5ewOhZBWhmBD5I=
Subject key identifier: 25:A5:4F:D1:43:61:64:F7:9B:80:BA:A1:C6:AD:2D:7D:72:12:46:D2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A658F93FA77D64F012F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86427a0b-a313-3bec-aac8-31c29b310ee5.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 34.96.0.0/12 maxlen: 12
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:65:8f:93:fa:77:d6:4f:01:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=24e96b4e-ce4d-4af4-9147-f933f2959da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:76:dc:f9:84:81:04:90:d8:08:18:f4:b4:
51:67:02:60:a0:41:cd:6a:2c:ba:7a:e3:bb:f7:9f:
a9:57:ab:bb:46:ea:7f:22:0c:95:62:57:3c:25:ba:
70:aa:8f:70:59:c0:00:bc:85:f6:d6:69:28:44:55:
3b:87:7c:e0:ac:19:16:f7:eb:d7:ee:9e:03:1b:d8:
df:a9:d1:6d:64:7a:d6:07:00:9f:71:d8:0f:eb:a4:
85:9a:27:c9:17:e3:0c:af:be:1a:df:33:37:26:72:
07:35:34:24:94:ec:53:dc:63:fb:2d:34:1c:74:3a:
35:31:81:5b:23:1f:28:05:e6:e2:ec:69:4b:e4:d9:
1d:8f:c2:f8:cb:91:df:a6:d5:9b:dc:43:91:32:21:
f9:05:56:d2:cb:32:08:9c:51:09:de:03:ca:ca:72:
9f:fa:b7:ba:ac:cf:33:5c:fc:1b:0d:7f:b5:89:49:
04:9a:35:6c:db:7a:88:be:f6:0d:82:a4:d0:2a:52:
a8:95:4b:e5:21:47:c0:03:3e:f9:2f:9d:60:d4:84:
e4:5b:1f:2c:01:16:5d:5d:b1:21:c1:59:d7:8c:31:
d5:ae:12:c4:59:a3:86:1c:a3:ce:be:70:2a:26:a0:
77:f9:37:bb:85:b0:e9:05:c7:82:19:8f:24:8e:e0:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:4F:D1:43:61:64:F7:9B:80:BA:A1:C6:AD:2D:7D:72:12:46:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86427a0b-a313-3bec-aac8-31c29b310ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:b3:b6:8c:7f:5f:de:f6:db:15:6e:35:4f:84:a4:65:41:f1:
b6:76:26:52:bf:79:f4:4d:3e:e7:f0:48:05:63:55:50:ca:03:
10:0f:5c:2a:d9:3e:b8:25:82:10:24:6b:d8:4c:fc:b9:25:7c:
e7:67:82:3a:88:51:30:1e:c5:19:11:c7:d5:2f:39:3c:f5:23:
0c:70:db:c6:2f:21:77:a7:c4:ed:ae:19:73:b6:a1:7d:59:fe:
1c:b7:5a:23:dd:1b:91:d1:53:db:f1:62:bf:88:a0:d1:6c:93:
09:59:18:45:4f:19:68:91:22:14:ad:26:72:47:0a:7e:82:b3:
0f:8d:d4:21:6b:0a:3c:41:df:8a:61:e9:af:ff:f0:2a:6f:dd:
91:a5:52:41:63:06:84:ee:0a:52:d1:ba:27:b9:f0:40:6c:2f:
c5:e4:9e:19:05:6b:f6:1f:d7:13:02:38:9e:89:c7:3d:66:51:
c4:92:7e:6c:fd:da:55:3c:48:a5:43:95:4f:80:f9:bf:97:f9:
30:a9:40:4b:2c:b0:12:69:d1:03:63:94:20:b2:78:00:db:f8:
f5:16:76:8c:80:d7:00:c8:d8:44:f5:3a:b0:62:39:c0:63:08:
22:01:5a:77:fc:4e:03:39:6c:ac:b1:2e:89:00:15:a8:df:2c:
7a:19:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:19:05 2025 by rpki-client