Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87b9702d-e4e5-3faa-aaf6-52db88f61301.roa
File: 87b9702d-e4e5-3faa-aaf6-52db88f61301.roa (raw, json)
Hash identifier: TOjRuN2/wPcHsVnONghf5GVve+oy+KBW7iYrV0AUI2U=
Subject key identifier: 7C:58:69:45:33:F1:43:85:96:2A:83:8E:D3:00:42:C5:6A:17:81:26
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A04D532997967BC1A8C26F8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87b9702d-e4e5-3faa-aaf6-52db88f61301.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.109.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:d5:32:99:79:67:bc:1a:8c:26:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9a4f42f2-d44c-4292-8e44-033dfecc19de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:2b:14:57:4d:41:ce:cd:f3:d9:66:0d:16:
3d:be:84:e7:2f:c4:49:08:6a:75:ee:d5:ef:56:1c:
86:20:1e:9b:a9:e7:0b:55:d3:9d:3a:4b:eb:ee:e3:
4b:ad:48:ed:9e:48:a4:28:f2:a2:f5:a7:77:32:68:
3d:ef:01:a8:49:34:20:59:2d:94:ba:b4:27:e2:98:
3e:13:53:da:59:98:1f:27:01:c0:6f:1a:bc:f7:0d:
61:db:3c:53:69:0c:ad:15:1f:87:1d:1f:0e:45:d5:
a9:0d:06:16:33:9b:60:66:14:98:8d:92:ae:96:f6:
8d:45:76:a8:59:fa:fe:82:55:60:42:cf:67:5a:c5:
f1:7e:fd:e6:00:6e:11:a8:bf:f6:05:2b:08:7b:93:
3c:e0:9f:a9:bb:63:b7:a7:4c:81:c9:a0:2f:44:ad:
e4:85:87:a4:d2:0d:28:9c:05:d2:98:c7:0e:4e:e6:
79:43:3d:6b:20:74:0d:dc:d0:cb:aa:d7:b6:f7:93:
f7:9b:62:5f:5a:54:c4:92:ea:3b:72:23:8f:5e:3e:
26:70:86:68:83:03:c1:08:29:e4:ea:84:d2:54:fd:
69:93:82:52:42:f7:c1:34:d1:c4:28:5e:9e:3d:58:
94:30:22:dd:49:aa:bc:68:3e:c9:91:3c:c3:67:75:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:58:69:45:33:F1:43:85:96:2A:83:8E:D3:00:42:C5:6A:17:81:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87b9702d-e4e5-3faa-aaf6-52db88f61301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.109.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:14:98:56:d5:b5:c0:36:49:d6:a5:dd:71:bb:88:38:4d:21:
3f:12:38:b8:d2:18:c0:47:71:52:f1:83:6d:ed:8e:ad:ca:41:
a5:13:89:5b:9f:01:98:61:d8:c2:0e:64:0c:e7:b4:cb:cd:bb:
65:c2:c7:3a:66:24:62:e7:bc:e6:ca:1f:4f:42:79:ba:25:5b:
51:96:dd:0c:65:83:37:5d:b6:56:b7:0d:ab:2a:3a:83:f2:c4:
26:f6:b0:a1:6e:8d:6c:f2:a7:5c:e2:ae:44:8a:bc:a0:7c:2d:
de:80:08:ad:4b:36:a1:a5:d9:d4:8c:c7:bc:25:9a:57:de:4a:
eb:26:ba:ed:2c:39:ed:f4:0d:67:6c:29:b8:06:23:08:db:ef:
68:22:dd:31:9f:65:2f:f7:8d:c5:d4:90:87:4b:bd:4f:14:10:
91:05:11:44:c9:8e:55:cc:95:92:f2:98:55:ca:53:35:bf:c7:
90:a2:17:bf:01:37:d9:04:d6:bf:b9:36:27:c1:6e:c7:6e:af:
f2:c2:31:34:3d:bc:fa:15:2e:57:2e:2a:ca:a1:93:74:e5:bf:
04:a7:a8:03:bf:74:46:f4:ff:ec:51:dd:29:c1:d0:86:8b:f8:
ba:6f:ec:7a:8d:d6:1f:f1:5d:90:cd:f8:b1:ce:a8:91:97:13:
03:29:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:41:44 2025 by rpki-client