Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dcfdd71-b8db-34d8-8495-2d91c0010649.roa
File: 8dcfdd71-b8db-34d8-8495-2d91c0010649.roa (raw, json)
Hash identifier: gbUyp8jSc5Wl48tc6kWunWw4M6y+w5wwvwft2SnahpI=
Subject key identifier: 26:1E:1F:E1:7A:C9:D3:0C:18:11:01:19:56:21:FA:03:76:3B:77:17
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309ED0444FABC8E7E69851380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dcfdd71-b8db-34d8-8495-2d91c0010649.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.132.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ed:04:44:fa:bc:8e:7e:69:85:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6f0ae1a1-1c47-48a3-ad97-a0dfbf2d870f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:a3:88:a7:39:b4:c3:10:01:38:f1:dd:7f:
64:c6:e7:7c:24:bb:8b:09:38:01:b9:71:70:d0:db:
6e:89:6e:44:cb:ed:73:75:a0:aa:db:3d:2e:bd:a6:
b5:e4:75:a1:94:b9:78:68:8f:82:3b:2c:dc:2c:35:
18:bb:9d:a2:f3:01:8d:36:f7:12:bd:2d:1b:71:3f:
e0:ad:32:a7:ea:c9:b5:8c:a4:43:e9:86:b3:32:46:
eb:07:db:19:8e:17:fb:0a:da:5f:19:ec:84:33:bb:
7f:03:7d:1c:1b:4b:83:b4:13:76:5c:bd:37:0c:23:
46:d7:82:f8:44:d5:0d:37:46:9a:f7:b5:ab:06:49:
b0:ed:82:98:4d:5a:c8:eb:8a:db:22:7a:08:5d:c1:
25:05:9a:67:b6:18:d9:16:8f:d0:8a:1a:79:6c:5b:
c6:88:86:63:ea:3b:d0:1e:7a:a3:78:06:ee:09:20:
a9:2d:38:07:a4:a2:eb:67:2e:21:ee:f2:b6:96:34:
38:10:ba:d2:99:64:36:d7:40:d7:0f:50:97:b5:db:
6e:34:ce:ef:8f:51:27:b9:aa:10:7a:2f:66:75:7f:
25:02:76:4d:d5:cf:32:47:67:b4:e0:c3:3b:8e:14:
eb:e0:bc:96:82:8d:31:2a:4c:f3:ef:ef:a4:69:fd:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1E:1F:E1:7A:C9:D3:0C:18:11:01:19:56:21:FA:03:76:3B:77:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dcfdd71-b8db-34d8-8495-2d91c0010649.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.132.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:72:75:72:2c:f1:80:23:bc:40:07:e1:46:41:d7:25:66:b6:
b5:57:d7:14:57:c2:87:b3:93:60:f0:ec:d1:2c:47:63:4e:9d:
5c:fb:fd:6d:9b:10:be:69:fc:61:85:e2:e0:05:fa:c2:2b:f2:
55:06:5e:4f:f6:a5:42:cc:97:d8:55:ec:18:b8:3c:48:49:00:
e6:43:85:c7:04:69:d7:a7:e2:7f:39:6e:f6:ba:11:d7:7b:68:
b5:04:94:2f:f5:8c:c6:5a:d5:11:eb:00:c6:58:15:0a:b0:0a:
d6:f4:12:1b:bd:b8:d1:ca:0f:d1:ce:68:c3:25:25:d0:71:ff:
f2:44:c2:5d:99:69:c3:b2:d7:4f:a3:65:57:5d:dc:b1:58:0a:
03:dc:f1:f3:d7:c5:38:60:2b:5e:9c:3c:98:a2:5e:45:22:b0:
8a:d5:dd:e2:e8:ba:c5:b5:cc:1e:1e:03:17:32:1e:64:0f:00:
c3:db:00:ac:6d:dc:01:fc:71:4b:b6:49:40:f5:72:89:6a:e6:
6c:6b:a2:5a:c9:1a:76:91:94:35:8d:e1:39:0d:37:6d:ef:ef:
80:2d:41:fe:90:55:7c:45:d9:74:d1:9a:58:e2:d0:64:08:ff:
4a:80:91:a8:d0:ff:08:32:5a:ef:48:ba:37:85:e6:53:ed:65:
85:53:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:48 2025 by rpki-client