Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/934eedb8-036c-3287-ba05-891dcebad0d3.roa
File: 934eedb8-036c-3287-ba05-891dcebad0d3.roa (raw, json)
Hash identifier: 9WoIzkX8yHJ+3x1Lep6Y4em2eynynP4qpNWR6uiibCk=
Subject key identifier: 72:4F:AA:78:F9:ED:07:0E:F8:E5:6B:1F:FA:6C:36:8A:81:40:6C:29
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A06DD8DA5D849AC283ACEA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/934eedb8-036c-3287-ba05-891dcebad0d3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.98.148.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:dd:8d:a5:d8:49:ac:28:3a:ce:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e328ced4-44eb-41ea-8fa2-3830ea628479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:ef:50:85:29:06:13:c4:33:aa:f3:8b:0a:
d5:d5:59:10:71:41:ca:5f:2a:57:2b:39:17:2e:8d:
a5:d1:67:ec:9c:e7:b6:ee:ae:8a:c7:9c:22:ab:8d:
9e:21:a4:f5:a0:0b:6c:64:06:9f:0a:ee:d5:b0:c5:
b9:8f:04:49:15:37:1b:65:d7:3b:b7:a5:bf:c1:57:
96:b9:1f:57:5b:2a:b2:4b:2e:ff:48:fa:3c:fa:dd:
16:28:e8:35:37:10:88:36:fa:97:d8:83:fe:a8:0f:
5f:7c:51:0d:7e:d1:45:2d:9d:97:f7:b1:50:47:45:
e9:d8:49:c4:09:45:15:03:f0:fc:7c:f5:b5:3d:f2:
b1:43:20:55:80:e4:f8:76:f1:f1:90:be:67:d9:81:
1c:ac:8e:c1:26:14:86:ba:59:68:39:74:16:ee:6d:
e1:86:86:e9:db:90:71:13:b3:59:7b:0e:a7:59:ca:
aa:52:ac:50:a8:62:cc:b4:69:1a:d2:b4:db:b1:b2:
ab:0c:12:b5:fb:e4:74:a2:9d:19:54:b7:cb:2a:36:
97:56:ef:f4:fa:cb:fc:74:4e:c3:ed:9d:ec:7e:ec:
13:c1:2a:f9:10:7e:90:43:75:f3:1b:0c:47:8d:18:
46:a2:af:6d:78:11:74:0b:dc:8c:9c:d2:04:57:7d:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4F:AA:78:F9:ED:07:0E:F8:E5:6B:1F:FA:6C:36:8A:81:40:6C:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/934eedb8-036c-3287-ba05-891dcebad0d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:c1:79:18:bd:ee:38:4e:59:a2:45:21:fd:0c:ca:6e:c6:43:
f7:e8:8d:46:7a:73:ce:0a:c2:ac:53:35:45:77:bf:a8:ee:b3:
6b:4d:93:9c:d5:02:ef:10:d5:ec:21:4d:45:21:13:0f:c3:6f:
b3:3b:17:e3:c5:13:6c:a4:87:79:fc:3c:b7:74:08:f0:e5:3c:
ef:88:f2:bc:d1:35:6c:27:2b:b7:66:4e:56:74:34:d8:e8:cd:
67:6b:2f:bc:29:b9:22:3b:47:b7:81:b9:e9:bb:b8:66:c7:88:
49:98:a6:69:7d:d9:a3:91:41:25:48:c5:15:a1:8a:ae:ee:c3:
20:a7:3a:c7:13:d0:e8:d3:c2:e5:18:8b:f7:25:4f:5a:0b:40:
28:62:f3:17:88:e4:bb:d6:41:dd:0b:99:3a:e3:39:3e:a5:64:
61:1b:d2:b8:32:43:d8:08:2a:9f:f2:97:04:20:5b:b2:77:e8:
20:8b:d9:72:5b:67:49:4b:f2:b6:0c:91:59:8b:9e:2e:33:51:
f9:15:76:d8:ef:10:17:36:ed:9b:3c:b2:8c:4f:17:66:9d:68:
72:6d:bd:c4:9d:f0:e4:2d:b1:c9:64:a4:82:a4:8e:0e:1f:69:
9a:2a:cf:fb:f8:de:4b:7a:c3:99:87:70:f7:87:67:66:12:63:
21:f4:32:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:09 2025 by rpki-client