Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b7ffff0-5ef3-3eaa-a554-99a648f44c1d.roa
File: 8b7ffff0-5ef3-3eaa-a554-99a648f44c1d.roa (raw, json)
Hash identifier: a9pV0dve7ONUYxU18xWGfaK/LgUmLkzz8RxQq+Nn72c=
Subject key identifier: D9:B5:F1:F4:AC:84:20:EE:FF:4D:00:9B:59:C1:C3:B8:0D:A5:03:57
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B065BE0BCC6559A393458200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b7ffff0-5ef3-3eaa-a554-99a648f44c1d.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:be:0b:cc:65:59:a3:93:45:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=83fd46b9-4b3f-4e03-8b30-c42fa0eccdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7b:de:f4:66:42:e9:3b:88:c3:2b:33:91:3c:
05:73:2f:38:cd:48:4d:49:c8:59:fd:f8:d4:b2:cd:
5a:b8:a7:a9:8b:0d:5b:7f:22:73:42:2d:f8:72:49:
75:54:1c:15:90:74:c5:81:ee:d5:d5:2c:cc:06:f4:
0d:cb:01:1b:47:90:71:12:21:e3:03:09:ed:72:ce:
81:10:41:95:57:5e:81:3c:70:cc:9f:28:a0:70:35:
3e:da:d5:ad:10:7e:33:d7:34:d4:3b:59:2f:76:4e:
30:21:30:30:5a:a7:1e:f7:89:d9:ac:25:93:34:c8:
03:47:75:b1:c2:d7:50:bd:d2:5a:75:fa:ec:cb:b0:
a8:95:f0:49:2c:f0:99:09:52:57:f1:18:0d:c1:b3:
58:ea:73:a7:dd:5d:77:87:36:52:c1:5f:be:26:75:
4f:5b:93:60:88:99:12:cf:9d:65:c5:4b:b5:a8:bd:
12:3c:ff:b2:51:fc:e0:a0:40:68:d5:02:d4:bd:e4:
8f:bb:11:6a:cf:23:9b:5e:46:e1:31:b4:bd:48:fe:
0e:6a:cd:84:b0:6c:8c:7c:6d:fb:d0:66:39:ca:4e:
64:c0:d1:95:92:f4:dd:9e:59:f9:d0:2b:6a:19:90:
00:cd:55:37:b8:ab:0e:cd:69:2b:cb:d7:82:02:08:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:F1:F4:AC:84:20:EE:FF:4D:00:9B:59:C1:C3:B8:0D:A5:03:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b7ffff0-5ef3-3eaa-a554-99a648f44c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:25:6a:39:db:5c:4c:5e:d7:11:9e:6a:6b:11:18:c7:cc:f6:
40:f3:7c:ae:7a:4b:01:37:9f:5f:21:9e:e7:ba:4d:0d:39:2b:
77:e1:6f:d4:c0:7a:b8:0f:1d:df:69:fb:fd:20:f7:df:d8:04:
5c:a7:4d:db:41:39:eb:37:53:cf:e3:84:4e:45:23:14:3f:b3:
89:d9:99:eb:66:6f:4a:5d:43:09:72:4c:5e:c2:40:9f:04:36:
aa:76:73:de:b5:2c:26:77:41:5d:d5:88:df:68:3c:ff:01:3b:
9b:2e:e6:92:e2:5c:42:09:c0:5f:79:5d:bf:32:b6:f3:bd:e5:
41:96:05:42:21:0f:14:4a:4e:b5:31:c8:16:03:be:69:b0:81:
cc:bb:8a:79:c6:4f:a3:02:bb:de:e2:05:91:ae:cb:d4:cb:cb:
58:82:ad:a7:a2:cb:48:48:8c:ae:77:f9:69:93:49:e3:1d:09:
63:72:36:2f:d3:79:df:f6:b7:0b:74:7c:cd:e9:93:4f:87:de:
dd:e2:1a:77:91:a6:87:9a:a8:0d:36:00:19:6f:5b:5d:24:1e:
5a:f4:21:6d:d4:58:52:70:ed:e5:c2:bf:40:c3:3e:54:66:f0:
16:50:a2:98:52:d8:a3:92:97:d2:54:2f:b4:bb:1d:27:3a:45:
52:8c:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:47:52 2025 by rpki-client