Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fd26d3e-3029-3d9b-af3e-500562b7afed.roa
File: 8fd26d3e-3029-3d9b-af3e-500562b7afed.roa (raw, json)
Hash identifier: fv3LDXtncSZsa3KtMRFBjLF6Wyg+hVTv2uglULWcOpg=
Subject key identifier: 59:16:9D:B3:DA:CD:5B:6B:AF:FD:25:88:3F:FC:3C:1D:B0:52:D5:F1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0852D1CEB901C8328562E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fd26d3e-3029-3d9b-af3e-500562b7afed.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.137.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:08:52:d1:ce:b9:01:c8:32:85:62:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b010798d-3363-4484-a49a-a751ffe3cf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:24:1b:fb:95:e5:2f:29:6d:95:ff:50:00:
04:4f:af:6e:7e:ff:89:bf:d0:10:32:01:0b:e4:cf:
cb:dc:97:e7:96:4a:98:44:87:3f:9e:7f:3a:df:87:
cf:7b:b1:56:ce:ba:23:96:c7:92:e0:44:06:8c:71:
8a:91:f2:79:e2:a8:af:52:69:0f:5c:4e:b5:01:b6:
ad:39:06:c6:ee:98:83:4b:49:1a:c2:f8:34:79:fb:
01:1b:45:35:d2:9c:21:2d:43:c6:af:f2:e8:57:0b:
25:c2:12:34:2b:fd:1c:37:9e:91:95:33:d5:c1:bb:
5d:ef:3f:0a:77:e2:23:91:5a:7d:de:92:35:2e:8d:
4b:73:89:29:f2:22:fb:04:c5:40:11:a3:be:17:91:
97:6d:99:13:d3:5f:0d:c3:fb:c6:e1:11:04:44:02:
cd:94:17:54:6d:82:8a:7c:f5:55:ca:60:d3:27:40:
e2:b5:24:8e:7b:76:19:be:8c:df:30:e5:e3:fd:fe:
79:07:08:48:51:75:14:5e:cd:72:f1:a2:05:21:1b:
ea:84:ac:b9:cf:81:f9:8b:25:f1:0c:81:e7:0d:f2:
ed:75:7d:ae:f2:55:05:c0:e1:31:cd:c0:b3:17:5b:
34:6a:49:ff:09:10:ed:af:03:a5:77:6c:0b:1b:8a:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:16:9D:B3:DA:CD:5B:6B:AF:FD:25:88:3F:FC:3C:1D:B0:52:D5:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fd26d3e-3029-3d9b-af3e-500562b7afed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:7c:e9:5e:9d:64:f6:a1:91:31:06:09:45:f2:f5:b5:1a:2d:
d2:f2:c3:de:cc:55:48:d3:02:4c:3b:b0:1f:14:02:44:46:ad:
c2:bf:9b:28:27:b1:de:70:19:67:5e:43:fb:5b:2c:a9:25:fc:
27:35:4f:22:12:94:59:71:5a:b4:4e:7d:ba:60:9c:62:89:91:
e3:48:3b:d4:61:7f:16:21:43:79:10:53:ee:0f:d5:29:fe:a8:
34:fb:0f:db:77:06:f5:a4:90:9e:cb:d3:6b:fa:95:47:9c:72:
67:21:2d:cc:53:a8:d9:fd:8d:a6:3d:a6:11:99:e7:be:fa:7d:
c0:fe:06:83:39:31:59:7c:98:fb:cf:33:e8:b7:eb:dc:b1:47:
a3:13:2b:a7:7c:9e:5d:70:02:c3:3b:43:aa:80:e0:0f:37:e5:
7d:c6:ec:c2:ed:24:d8:11:5f:2b:4d:68:06:a8:4f:b5:bc:3b:
1e:7b:0b:b5:70:39:1f:78:f0:3d:1b:13:5c:82:16:d9:ce:31:
00:21:82:5c:a0:05:81:f2:dc:de:30:94:c5:ad:4f:7c:b3:23:
5f:9e:f5:8e:60:bb:23:7d:34:db:90:24:43:2e:38:0a:64:43:
8b:37:76:3d:0a:2c:2d:72:b7:81:11:ca:03:9b:a6:56:8d:7b:
1a:b1:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:46:34 2025 by rpki-client