Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e07de99-24f3-37e8-af9f-70162ca86c31.roa
File: 8e07de99-24f3-37e8-af9f-70162ca86c31.roa (raw, json)
Hash identifier: cHVJ0uCBluQerFwNry1cv2A/47MgGzrA13k4vALw3ag=
Subject key identifier: 90:1B:90:3C:22:CB:91:6B:B0:51:5C:4A:F0:57:19:11:CA:A5:C0:B6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A054EFF375E92A149088680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e07de99-24f3-37e8-af9f-70162ca86c31.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.140.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:4e:ff:37:5e:92:a1:49:08:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=014a31c0-9604-4f13-a231-b46e8b6ca35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:60:ca:66:9f:3b:92:a0:f2:d2:ca:b5:7d:
8e:19:eb:0c:0e:78:9e:8a:aa:3c:ea:62:f1:2a:2f:
29:5b:25:ff:a6:6b:af:d5:1a:aa:94:e4:7d:b8:6c:
04:7a:1a:2c:e7:9b:1e:32:fa:d6:ea:04:63:ef:37:
6e:21:7f:cf:92:ef:fa:3e:68:56:96:34:28:25:73:
1c:a8:88:64:10:d7:c4:da:a4:08:1b:f2:ce:cc:e2:
6d:5e:44:ff:84:99:c0:85:b0:74:24:e9:35:4f:2f:
54:6c:80:87:d3:8a:af:1f:b2:bd:24:92:49:0f:df:
e2:d3:55:bf:f4:eb:13:d3:5e:c9:46:12:2f:58:ed:
3f:99:03:bf:27:81:2b:b8:65:d3:84:02:5d:61:af:
99:61:ec:56:f1:f3:28:f0:c5:ad:b4:40:df:23:84:
6e:9d:73:5d:87:6a:82:b0:a1:d5:fd:f2:77:64:e6:
3d:31:f1:fb:77:b5:d6:9f:d9:9d:fa:69:62:61:63:
91:74:5b:9c:d6:2b:d3:0b:69:90:21:cd:84:07:e0:
22:43:fa:87:ac:89:5a:a9:8e:5c:74:a7:7c:58:26:
73:71:20:a2:bc:c7:5c:6d:5d:11:1b:7c:9a:cb:fd:
e7:98:26:38:7c:d8:1d:18:24:2b:fd:85:3c:6d:d0:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1B:90:3C:22:CB:91:6B:B0:51:5C:4A:F0:57:19:11:CA:A5:C0:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e07de99-24f3-37e8-af9f-70162ca86c31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:16:94:f3:2a:11:bb:16:ff:01:90:f8:1c:e1:55:69:6c:14:
7d:ba:d5:c1:31:76:9c:28:7c:50:4f:8c:b9:e7:62:b9:0c:2c:
2a:7a:32:d6:d7:27:8a:30:1a:48:05:18:cb:a0:2a:60:9c:a1:
4b:71:3e:4f:8a:f1:0c:5f:23:a7:d0:69:60:42:41:4a:70:d2:
4d:26:f8:cb:0d:3e:3c:dc:3a:77:d2:1b:7e:eb:1f:9a:92:b7:
7a:71:a3:34:bf:dc:ad:4a:ac:8d:d0:0b:6a:98:e0:fb:0b:2a:
82:41:66:e9:51:87:54:6b:db:1b:de:e3:d3:fe:3c:bb:d0:0a:
7c:de:ce:ab:5d:47:1c:12:9e:51:9c:cc:62:52:4f:05:32:b4:
00:84:ef:d7:e2:ff:6f:dd:3a:11:c2:11:68:aa:6d:38:c9:05:
50:c4:ba:d9:2c:b4:90:fe:02:46:6a:e3:7e:74:65:2a:d6:83:
c8:b8:dd:52:61:ae:0e:0f:8e:3b:e6:3b:6b:0c:cc:2d:60:9f:
5c:68:35:6b:e1:ad:53:43:55:ef:0f:81:04:18:b4:a9:a7:70:
28:40:db:2b:8b:1e:e4:38:f6:91:55:24:e3:f3:6d:5b:e7:b7:
21:2c:bb:98:38:bb:c3:75:c5:d7:89:43:6e:45:87:a2:7c:cf:
4b:70:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:43:27 2025 by rpki-client