Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/942b4fe1-001e-34f5-b6be-779b209c736f.roa
File: 942b4fe1-001e-34f5-b6be-779b209c736f.roa (raw, json)
Hash identifier: BJbZ1r/Nhq3dFhyIWFLTw9YuPEotZplWQW+6daRB9Kk=
Subject key identifier: 34:7B:5B:90:63:B0:C3:94:19:BF:F6:AF:1C:02:A6:EA:36:D8:4D:B4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A02E16D5794796A056723C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/942b4fe1-001e-34f5-b6be-779b209c736f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.122.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:02:e1:6d:57:94:79:6a:05:67:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6772a2cd-9917-4970-8b1c-054ad06e8c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:01:ca:07:e8:4e:07:d5:cb:96:3b:7f:50:48:
cd:08:40:1d:8f:be:43:48:19:19:a0:70:39:32:97:
a5:d5:b2:c3:5a:54:8f:50:93:4e:57:5b:54:1a:d9:
c3:6a:8a:8f:cc:26:46:6e:8a:89:ef:7c:dc:b1:8e:
20:e7:df:49:30:33:8a:a3:19:d2:23:74:9d:45:93:
9d:24:58:64:52:74:df:3c:08:74:89:36:45:03:52:
00:e2:2c:19:b4:e7:aa:e9:90:f3:49:86:30:00:06:
d7:51:bd:00:2a:5b:5b:36:ba:81:91:2b:fd:ec:05:
75:67:80:39:72:81:b2:3e:c5:a9:57:9a:6e:a1:59:
b1:99:28:d0:b8:04:f0:e9:15:a1:0c:bf:9f:0f:5d:
5c:61:2b:24:cd:86:4f:cd:4f:a7:28:7b:4a:9b:d5:
df:e8:e3:b1:13:4c:cd:37:d0:e5:3e:7d:25:59:9a:
8f:d2:d6:fe:6a:9c:02:44:7f:e8:80:24:fd:b5:1b:
7c:e9:48:e5:b7:ee:d8:4c:5d:16:9c:cb:4b:59:54:
98:ae:33:7e:50:6e:7e:cb:92:2d:3d:09:34:6c:be:
cf:fb:fb:4c:12:13:ec:6e:e8:a9:c7:b3:da:c7:be:
c5:e8:6f:59:a3:36:f8:9c:d8:c3:7e:62:61:62:89:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:5B:90:63:B0:C3:94:19:BF:F6:AF:1C:02:A6:EA:36:D8:4D:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/942b4fe1-001e-34f5-b6be-779b209c736f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.122.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:e6:b9:b1:05:74:7a:d9:70:a4:6e:ed:5f:78:32:88:3f:91:
57:2f:3e:f8:90:ce:1e:d9:a2:fd:cd:82:92:f3:8c:03:e6:54:
d1:62:25:51:fc:97:33:87:84:be:dd:06:cf:84:49:4b:cd:83:
9e:da:2f:60:d6:2f:a7:4b:67:ef:f0:d6:5a:cb:df:d3:22:ee:
4d:8e:43:c9:ba:dd:b0:e4:dc:51:d0:77:95:7c:48:78:17:64:
0c:f9:f2:7b:e8:3b:e9:d8:0c:24:25:b6:ff:54:52:9a:f1:18:
a3:06:62:55:bd:87:80:7c:34:5f:16:0a:20:af:fe:1f:d6:aa:
39:7e:bb:1f:e2:4b:d5:18:b1:31:63:5e:ef:2c:dd:14:e3:55:
19:7e:66:b3:f2:d9:31:b0:cd:5c:7f:60:74:98:46:cd:bc:66:
b1:46:6e:eb:8f:50:a8:6c:5d:0b:ad:b0:60:4c:6a:f0:17:2f:
f0:03:a1:5c:18:ac:55:65:69:45:f5:36:58:8a:09:ee:17:8b:
70:6b:21:2d:12:c3:a5:56:2f:ca:d0:a7:65:9c:37:7c:df:1a:
25:c6:dd:de:58:c9:96:7c:03:33:b9:47:28:e8:3c:41:c2:be:
c2:07:a6:31:83:6c:cb:b6:31:aa:e2:18:eb:e0:ca:c9:a9:c6:
36:4a:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:10 2025 by rpki-client