Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9269ee68-2dba-3d0e-b754-277e9b9a9824.roa
File: 9269ee68-2dba-3d0e-b754-277e9b9a9824.roa (raw, json)
Hash identifier: SRfuD5GTFp8cI2/+ETo2McR8h8szkZcdfonO+xXXNeY=
Subject key identifier: A5:CC:3D:AF:71:D9:53:D7:27:1E:2E:92:DD:B0:10:11:6A:7B:BF:10
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285843B2A70DB24C561622E628BC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9269ee68-2dba-3d0e-b754-277e9b9a9824.roa
Signing time: Fri 27 Oct 2023 21:00:14 +0000
ROA not before: Fri 27 Oct 2023 21:00:14 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15169
IP address blocks: 34.1.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:b2:a7:0d:b2:4c:56:16:22:e6:28:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 27 21:00:14 2023 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=d181a977-ff63-40b8-9adc-09b8d87dee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:76:6a:be:64:cd:a8:9d:66:36:9b:0c:26:
bc:2b:28:8d:97:a0:36:ed:04:42:d1:b7:d1:21:35:
98:36:5d:4c:13:cf:3f:1c:c2:28:9b:a9:73:00:a0:
7c:9c:0e:ad:57:f9:64:57:d4:50:fd:c8:8e:d2:02:
29:f4:c4:76:0b:c0:28:99:ca:25:cd:5b:17:15:28:
13:d0:b2:90:00:4b:73:48:94:56:b9:dd:53:82:90:
a6:41:66:26:0d:21:54:c1:52:2e:7e:79:b5:8c:db:
55:04:3e:e7:1b:9e:ba:15:1f:ae:a1:53:34:c5:80:
2a:cc:a2:80:a2:9b:f3:5d:7e:2d:7d:cf:77:8e:9b:
b5:49:fb:12:65:d7:98:14:8d:6b:f0:6b:06:14:ba:
91:7b:6f:e7:4f:3f:02:0d:57:8f:5d:56:f0:0b:30:
4b:e5:79:5b:a9:9e:f5:5a:a6:4d:39:f3:6a:7a:83:
3e:ac:2f:e9:1b:b9:70:b7:56:c9:3d:bf:e2:1e:bf:
f8:da:34:cf:50:41:13:b5:57:62:53:88:cf:38:71:
a9:04:98:b2:ef:e3:4c:dd:d3:72:19:39:70:a6:91:
a2:ff:f8:d7:ff:d4:3a:66:bb:a0:f3:67:c8:36:39:
0a:d2:dc:e2:41:43:83:93:2e:5a:6e:53:7f:ee:65:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:3D:AF:71:D9:53:D7:27:1E:2E:92:DD:B0:10:11:6A:7B:BF:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9269ee68-2dba-3d0e-b754-277e9b9a9824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:55:7d:9d:8b:c9:94:24:ab:37:ba:fd:f4:b9:ed:32:b2:fe:
6f:5c:cc:39:83:6e:a0:3c:ac:a1:88:26:7c:35:0e:7c:d1:5f:
5f:ba:1d:e9:84:3f:14:c6:ad:3d:58:5b:ef:d8:d4:55:c5:dd:
52:f9:2a:75:57:c9:59:45:5e:4e:3c:dd:54:17:ac:e9:da:7d:
0d:39:3d:4f:40:5e:76:74:5a:3a:65:01:ba:a9:d8:25:91:f0:
b3:9d:0c:21:df:c5:6f:3d:2e:45:ae:a7:ae:19:75:80:4c:8e:
90:5b:67:5f:dc:2a:3c:cd:0b:ac:08:99:be:45:89:05:79:f3:
86:32:ea:86:cf:aa:23:7d:04:e7:cb:c8:9b:31:05:14:b3:e3:
08:8f:ca:92:81:6f:5c:d2:20:04:51:d3:ca:e5:df:e2:35:61:
bc:b7:1c:a4:c9:95:2e:2a:ab:4e:3c:00:1d:42:49:f8:2a:ba:
6c:64:7e:49:3e:23:6d:4d:15:d1:b8:f8:bb:ee:96:ad:66:7b:
cb:8c:a6:9c:59:97:2b:5e:af:47:22:2b:ad:ad:5c:d6:5b:a2:
f8:d9:2c:65:d9:b9:b7:dd:55:f5:f6:05:4f:ce:f7:a9:5a:46:
85:f0:5c:a3:7a:e1:1c:fc:c9:60:71:23:9f:82:eb:4b:f5:81:
87:9b:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:53 2025 by rpki-client