Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95b645ce-a663-3a0c-8c65-9b37fdba49e6.roa
File: 95b645ce-a663-3a0c-8c65-9b37fdba49e6.roa (raw, json)
Hash identifier: x4RKQNSUi3w0QrzGMc7ZhkSbjXMjANm2pRIZZmu9nSY=
Subject key identifier: AC:94:0C:0C:7A:B4:6F:75:08:92:5D:B5:92:89:C6:72:87:12:67:49
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285840BF5D41797B36862604C72A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95b645ce-a663-3a0c-8c65-9b37fdba49e6.roa
Signing time: Sun 29 Jan 2023 12:00:00 +0000
ROA not before: Sun 29 Jan 2023 12:00:00 +0000
ROA not after: Sat 03 May 2025 04:00:00 +0000
asID: 396982
IP address blocks: 34.22.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bf:5d:41:79:7b:36:86:26:04:c7:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 29 12:00:00 2023 GMT
Not After : May 3 04:00:00 2025 GMT
Subject: CN=6553369c-66d7-4d8d-9a4e-f7ea20bb283a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:71:8b:40:74:d6:74:b1:1f:38:17:4a:4f:
a1:6b:17:de:28:21:09:01:94:75:a6:15:04:10:ef:
59:95:39:a8:0e:6b:77:92:0e:0b:bc:d9:05:ee:6f:
ef:42:b0:89:0a:1a:1c:24:20:cc:88:b2:42:50:61:
cc:94:4a:a2:e9:9a:ba:c9:30:d1:48:6f:a3:70:a5:
05:1d:6c:e2:ec:45:53:4e:83:26:f9:51:7c:b5:99:
00:76:58:40:9f:6f:c2:af:9d:14:a7:ab:76:fb:a3:
e5:f0:50:da:d5:04:c2:ae:d5:9f:37:cb:b6:2c:2a:
58:d7:04:c2:d8:d2:c0:08:36:7c:40:86:85:a5:be:
84:3d:9b:54:8e:95:3c:6d:e2:cb:16:74:4a:66:bd:
10:84:82:49:d4:72:e8:b7:5c:a9:fc:14:fe:65:c9:
e6:da:78:40:79:fb:4f:98:02:17:61:bd:6d:62:74:
ad:06:51:20:d2:0b:bd:a6:20:9c:5b:14:16:94:83:
89:7a:35:a4:5a:53:0d:08:c4:97:a5:27:7b:b7:93:
7c:d2:40:7c:66:ad:1c:85:79:5f:d0:7d:fb:a9:f1:
64:a9:08:e8:58:5b:c0:ed:93:82:53:8a:6b:69:22:
24:71:e8:e8:02:3d:24:52:ea:1d:01:07:26:bb:d3:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:0C:0C:7A:B4:6F:75:08:92:5D:B5:92:89:C6:72:87:12:67:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95b645ce-a663-3a0c-8c65-9b37fdba49e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.22.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:0a:c0:13:b6:1b:e3:6e:7b:9d:59:78:0d:7d:af:12:e9:b8:
43:5c:dc:23:8c:7a:c8:03:be:c6:01:57:db:22:73:2c:3b:52:
20:62:51:2c:bb:f5:a4:25:aa:d8:2c:26:81:ec:2b:3c:8c:9b:
73:53:0b:50:ca:83:03:df:4e:e4:e0:4a:06:ed:18:c5:9e:6a:
c7:45:ec:62:1b:54:85:e7:28:c0:db:52:db:f1:48:44:32:aa:
c7:9d:e9:6f:d8:e2:65:c7:0d:41:ef:3e:0d:b8:84:ab:d9:a3:
fb:95:d2:46:1d:d7:f6:66:c6:33:75:90:28:55:32:c8:8d:8f:
56:81:88:49:3b:35:65:fe:1f:3e:d9:cd:a1:6f:17:21:c7:5a:
97:1f:44:a2:08:1b:b5:14:5d:3d:51:33:61:a6:0a:cd:00:e4:
21:8e:92:54:81:a3:2f:34:c4:df:4d:97:5e:39:c3:3a:c3:46:
2a:99:c0:03:8e:4e:66:45:37:83:6c:ee:68:e2:2d:27:ac:a4:
8f:9c:c0:b7:22:67:5b:24:4a:eb:8a:15:e3:6b:82:20:8a:87:
7b:37:cf:5b:61:ce:e1:c1:e9:60:5d:29:fb:25:a5:c7:18:18:
01:b7:77:34:46:3e:c1:58:f6:5b:04:71:6f:bb:3e:32:79:58:
97:e6:58:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:48 2025 by rpki-client