Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/870a7391-e116-3a8b-8ab7-f20da044e655.roa
File: 870a7391-e116-3a8b-8ab7-f20da044e655.roa (raw, json)
Hash identifier: MGPUuExY7GqWMxmxPT8Acd0dGx+vpVUo0hLWTFfrmx4=
Subject key identifier: 32:C7:8A:CA:C9:3C:97:CA:C7:26:82:78:42:34:5B:F1:BD:FC:7B:1B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720AB896D30D9BB2CC8E9500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/870a7391-e116-3a8b-8ab7-f20da044e655.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.166.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:b8:96:d3:0d:9b:b2:cc:8e:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=c42c225a-7960-46ae-9de8-1d8508827df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c1:a0:7c:ff:cb:2a:93:98:4b:68:9e:fd:1d:
e0:af:0e:fb:f2:72:0b:bb:3a:7f:c7:9f:71:ce:24:
42:82:89:dc:44:5d:cc:ee:a5:c1:46:be:4b:91:76:
d2:f7:4b:04:c6:d8:0b:52:b9:de:b9:c2:36:17:41:
fc:e7:ad:fa:d9:36:39:c4:6e:34:42:86:b5:51:25:
fb:37:f6:01:c5:40:03:1a:89:c4:15:f1:c4:a9:98:
fd:b7:1e:10:34:ab:15:03:e1:60:22:dc:6b:63:bb:
82:d9:75:18:4d:24:97:8b:fb:a7:7b:e7:0d:2a:08:
d1:8b:19:f7:ee:3c:38:bb:0d:b9:49:bb:24:30:d4:
9e:60:57:fb:78:82:03:b8:ba:1a:ab:0c:a2:56:0a:
80:1a:69:dc:02:c0:ad:4a:af:b2:54:fd:42:5c:e4:
34:7d:0c:23:92:f5:67:fd:65:91:54:ad:26:b7:8e:
e7:ef:b7:29:62:69:76:5f:14:e9:12:ee:7e:2c:8d:
0e:7d:72:8f:64:91:a6:b4:a9:a8:1d:0c:e0:7b:d1:
b6:dd:1b:3f:ae:11:34:3a:5c:67:4a:3d:7b:86:d7:
21:3c:84:f4:77:15:9a:97:d3:69:6d:57:25:38:b9:
e1:e1:b6:36:a3:0d:f7:23:86:9b:3d:94:2b:da:cb:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:8A:CA:C9:3C:97:CA:C7:26:82:78:42:34:5B:F1:BD:FC:7B:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/870a7391-e116-3a8b-8ab7-f20da044e655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.166.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:26:3a:6d:a3:b2:73:dc:71:48:05:51:47:c4:81:20:9d:6f:
0a:43:10:c1:99:78:55:8c:92:c1:5b:5f:27:a5:08:20:70:14:
44:4c:59:ee:c7:5e:18:d6:a9:5b:ad:f4:3f:1d:da:76:2a:f6:
e5:b1:4a:27:b0:6b:e3:3f:f0:02:a5:76:6f:15:75:38:39:90:
2d:b0:ce:6e:c5:6a:ca:0a:5c:82:a2:b9:26:a8:a9:55:e6:06:
ea:62:de:4b:06:98:1e:42:87:46:77:f2:a8:ce:90:55:28:5e:
02:bc:d8:7d:e9:70:0e:85:d7:ec:d2:58:67:09:78:30:6d:b0:
19:40:36:e0:79:cc:b0:b5:50:60:b8:60:8d:01:36:01:1a:91:
e6:bd:99:e6:3f:13:0b:4c:95:32:95:88:b8:40:e0:cb:13:ea:
55:3c:ae:89:a1:5e:22:f5:95:62:70:42:8e:3f:e5:63:79:ce:
a6:d8:a7:83:34:36:bb:e2:cd:84:cf:d2:99:51:b5:0a:dd:94:
3e:1a:de:f3:9f:a0:73:57:fb:46:64:e7:fd:c3:ff:23:48:fb:
41:6f:bb:ad:d4:7f:0f:c9:71:10:4b:c7:7b:17:e2:87:37:8b:
a3:c7:09:08:73:6d:eb:c8:ba:b8:3f:94:a4:ce:1d:fd:b6:7a:
e2:e2:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:44:29 2025 by rpki-client