Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab22a0f-6a4f-3abd-9fa0-cb26cdf7cb3d.roa
File: 8ab22a0f-6a4f-3abd-9fa0-cb26cdf7cb3d.roa (raw, json)
Hash identifier: 7q3GQEygVAby3SuYZvQpXLNMKL+aZZaRbY3rvJTJWG4=
Subject key identifier: 11:E0:90:8C:FA:79:B2:7D:61:E3:4F:81:6F:BB:DB:71:15:39:A5:7B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A114293C1532D07541BB448
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab22a0f-6a4f-3abd-9fa0-cb26cdf7cb3d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.105.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:11:42:93:c1:53:2d:07:54:1b:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b9b6e85a-64e5-4dd1-a82a-a3fd2f9ba34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:73:e3:17:90:5a:da:e4:8a:4d:84:e4:80:a3:
36:b5:86:7d:53:e8:e5:a7:9b:72:86:fe:b5:e6:c6:
37:2d:92:bf:2d:d6:a1:e0:d8:ea:ca:d1:44:46:48:
93:08:ea:c8:89:37:52:e6:a5:29:95:07:6f:1c:e9:
d2:c4:88:0a:a2:69:f3:d9:01:37:57:6e:e2:d9:f4:
79:05:34:54:89:1d:d6:66:1b:75:c6:b1:11:25:1c:
03:21:72:d4:63:4b:cb:58:76:65:90:0c:9e:53:fa:
9d:40:09:fe:93:a1:1b:d2:75:0d:c8:b3:a0:d1:29:
ea:e9:85:ae:5b:27:c9:29:6e:e8:d9:ed:34:b4:68:
c7:78:06:3c:56:cb:5d:4b:cb:46:24:3f:bf:50:2c:
5e:97:fb:c8:53:08:d7:ef:51:bc:4c:d5:ea:9b:ac:
70:e6:20:60:3f:68:2d:03:1d:23:91:8c:f5:3e:4e:
2a:e4:21:49:f3:75:a7:4f:a6:5c:34:ab:5f:02:7d:
1d:22:16:0d:36:6f:c8:d4:81:bd:24:ed:f7:fa:6d:
3a:f2:0e:be:69:bf:8e:ad:b3:67:c5:4d:32:64:ee:
cf:05:15:14:cf:7c:d9:aa:0f:cf:23:44:d8:6f:46:
da:81:02:86:8c:28:39:74:aa:18:b9:8a:5b:60:ff:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:90:8C:FA:79:B2:7D:61:E3:4F:81:6F:BB:DB:71:15:39:A5:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab22a0f-6a4f-3abd-9fa0-cb26cdf7cb3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.105.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:2a:5d:6c:30:17:07:67:87:fd:a8:4a:58:6c:8d:29:2f:c8:
47:71:ba:b7:25:7b:c3:6f:1a:03:cd:98:fa:f8:13:9e:de:ee:
ab:97:05:2c:86:65:d0:a8:b2:1f:16:46:ea:59:c2:90:7d:e5:
06:ab:0a:6f:73:d3:a3:49:20:bf:ac:ed:e0:b4:94:8a:b2:76:
7e:77:82:2a:61:08:79:ad:29:7e:28:8d:f9:9a:26:c3:d4:57:
33:6f:43:ab:e0:31:96:86:15:10:47:9c:63:9d:42:8c:bb:03:
86:64:ed:65:f8:9e:1e:22:56:57:41:e3:7f:5e:f3:9e:4f:36:
81:bf:c0:c7:d2:a4:f1:eb:8b:6b:07:a5:a7:f3:92:5d:77:20:
82:9f:b5:d6:1c:78:8f:30:11:c7:7a:95:90:b8:e1:dd:a5:60:
43:de:d6:f0:c4:9d:b0:ef:53:4c:0b:ef:1e:94:0e:e3:65:3c:
7d:43:4f:59:43:c4:c3:bb:d2:27:c7:8c:c7:d5:b4:e5:e1:d0:
f6:5e:43:45:a1:42:48:a6:f0:60:11:f1:8d:e4:50:91:d1:f9:
12:e3:fb:f3:93:3d:c9:75:9c:88:4d:e8:a6:d4:7b:3b:79:5f:
1d:ca:14:fb:bb:fa:82:af:aa:1a:87:77:2c:c1:b2:22:9d:5f:
f6:60:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:58:58 2025 by rpki-client