Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d669fd4-3df2-3db2-adb1-a545b73b37b4.roa
File: 8d669fd4-3df2-3db2-adb1-a545b73b37b4.roa (raw, json)
Hash identifier: 8HDSOBy6dsCpWG5uCW4fKh6Y7F9wfmpa+TwCmLCeogI=
Subject key identifier: DB:31:6F:28:51:A8:97:9A:66:83:45:63:C9:E1:96:5C:9D:6C:08:97
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A20BF3CDB39EC1B5F30DCA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d669fd4-3df2-3db2-adb1-a545b73b37b4.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:bf:3c:db:39:ec:1b:5f:30:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7c9607fd-a7f9-4e03-9f08-9d178f872a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:8b:d0:a5:c6:2d:95:7f:54:ee:e9:68:36:
0f:5a:5d:07:43:f7:29:ba:36:8c:3c:bc:56:9d:90:
2a:4c:05:f6:2d:50:f6:f3:57:73:ff:83:63:b3:10:
75:de:b0:ed:ec:a0:3c:35:8a:cb:6a:a2:78:95:e7:
d2:12:de:c3:9c:20:4b:0d:b6:10:44:03:b3:ed:b6:
e5:ef:c5:08:d9:66:c6:0e:e5:2a:4a:1c:bb:d1:1d:
f6:f5:cb:10:db:62:83:a2:d7:7d:0c:0c:68:d1:ac:
9a:06:25:d0:03:64:d2:5f:83:7f:b4:38:16:98:9e:
75:fa:0b:7e:5f:cb:e2:2b:25:3c:5e:1b:27:d7:7b:
6b:ff:7a:b9:69:ad:b2:a4:1f:d6:58:cc:75:9d:8c:
e1:7d:3d:08:0c:d5:3c:7d:90:3c:db:c6:81:a3:24:
67:48:2e:6b:3e:a1:5c:62:90:df:51:58:8e:74:0f:
cb:2a:e3:85:d4:40:28:ab:38:85:f3:90:b1:1c:bb:
76:b7:ca:2f:e6:41:65:45:ad:3d:df:6a:5c:a8:12:
a3:c3:cb:5e:d1:ca:7b:4a:d5:eb:dc:5f:06:b9:2c:
93:88:0e:d0:4c:23:8f:18:e3:7b:2f:8b:07:2b:bb:
07:83:a2:79:91:aa:29:86:50:80:b5:58:0b:08:5f:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:6F:28:51:A8:97:9A:66:83:45:63:C9:E1:96:5C:9D:6C:08:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d669fd4-3df2-3db2-adb1-a545b73b37b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:94:73:9d:08:f3:e4:e7:4a:6a:11:0b:65:8e:47:da:f4:01:
cd:b5:31:ec:2b:33:b8:a5:4c:e4:18:ff:a9:3c:35:0e:4c:a9:
f5:fe:70:b7:3d:c3:3e:ec:fb:02:ea:98:89:fb:18:b8:10:bc:
70:a6:bf:c6:07:d3:13:d9:00:ac:c2:bf:fb:0f:8f:50:d4:80:
a0:44:2a:cd:ff:d1:24:5e:06:ff:2d:8a:bd:30:3a:f9:52:07:
0d:e0:1f:a0:6c:c9:2f:2a:5c:c6:73:ab:f7:1f:a0:7e:9a:d2:
53:c6:8c:03:aa:61:cb:c6:3e:21:76:70:4f:3c:5e:05:76:30:
e4:30:0e:94:71:d8:3b:a7:37:72:0d:41:7a:fa:96:87:e2:a9:
0f:96:af:6f:2e:6d:f0:58:9b:ef:da:e8:3a:84:80:8b:38:0e:
0d:c2:e9:fd:73:50:0d:b5:08:fe:ef:3c:56:2d:94:6b:77:a4:
10:f5:27:6c:88:c6:9f:35:4f:3e:90:92:0e:93:a1:2c:5f:db:
45:3e:ae:23:08:f3:0f:ce:ea:52:43:50:ff:92:f4:89:94:c5:
1e:92:40:19:07:3b:1c:32:e9:a5:9b:ab:b4:58:5b:b1:51:d1:
a7:9e:c7:6a:c8:e9:8f:d7:bf:c1:37:b3:53:3e:9f:7e:8e:75:
e2:b1:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:40:09 2025 by rpki-client