Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/991c241f-272a-3b86-933b-be19455da408.roa
File: 991c241f-272a-3b86-933b-be19455da408.roa (raw, json)
Hash identifier: TQ0HrVlQifq4F6WM4rIAswPeXfV7smWxti+0hXiM/J0=
Subject key identifier: DF:8F:A3:DC:D0:C7:6E:43:CA:95:4F:4B:DB:C8:53:D4:B8:22:77:35
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842947EE485C46A2E67A376CF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/991c241f-272a-3b86-933b-be19455da408.roa
Signing time: Sun 16 Jul 2023 12:00:00 +0000
ROA not before: Sun 16 Jul 2023 12:00:00 +0000
ROA not after: Wed 27 Nov 2024 05:00:00 +0000
asID: 396982
IP address blocks: 34.40.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:94:7e:e4:85:c4:6a:2e:67:a3:76:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 16 12:00:00 2023 GMT
Not After : Nov 27 05:00:00 2024 GMT
Subject: CN=883f34d6-1c01-4e20-abe4-07f018b43e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:98:00:dc:1e:da:47:a0:80:f2:b7:24:e6:
07:85:e4:2f:b9:86:01:06:1b:22:54:9a:76:e8:8c:
45:57:e4:43:44:66:38:c7:0d:8f:c8:6c:f3:91:c1:
9c:21:c1:36:50:e4:4e:b1:7d:33:8d:cd:a3:28:17:
db:cc:43:a0:60:1d:c4:c5:91:07:45:99:3e:c0:38:
e0:e9:dc:ba:dd:90:9c:2c:35:6d:2b:16:86:7c:83:
7a:fd:11:70:29:5d:aa:fc:42:e6:d0:22:59:81:41:
ba:a4:91:4f:4b:3d:11:b2:26:72:29:35:92:53:89:
62:5c:d3:7a:d0:66:26:03:b9:e4:de:ed:7d:12:8a:
77:af:a5:ce:1a:11:8c:78:69:ac:2c:ea:f6:8f:b9:
5e:97:1c:2a:1a:21:5d:ca:8f:a1:35:59:95:d7:f0:
a7:7f:68:0b:46:38:45:43:38:a6:f5:b1:40:63:5c:
b3:a4:8b:10:03:65:c0:ef:69:95:99:fd:21:ed:cf:
c3:d4:9a:57:c4:dc:00:d7:b0:1d:f9:f4:46:99:e3:
cc:68:29:07:8f:fd:b8:56:79:46:1e:f3:7c:b8:50:
0d:7a:39:c7:54:c2:ff:48:bc:cf:62:80:7b:d2:05:
23:f3:5c:fe:81:39:0f:65:dc:97:98:5f:13:e8:95:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8F:A3:DC:D0:C7:6E:43:CA:95:4F:4B:DB:C8:53:D4:B8:22:77:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/991c241f-272a-3b86-933b-be19455da408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.40.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:38:1e:4a:ac:7b:1b:c6:b2:4d:84:bd:46:c6:e8:3a:9a:6e:
d9:7f:23:e7:a5:d5:7a:c4:45:87:17:a8:6f:d5:16:0d:a7:b8:
24:d4:2c:96:7b:25:50:13:81:fd:04:ab:bc:43:69:4b:7c:5f:
66:43:51:22:c3:7f:a4:3f:16:e7:46:0d:5c:cc:61:90:db:29:
66:79:9b:bd:0e:55:71:c7:4f:ca:ef:d8:9e:5a:dc:33:93:65:
8e:0c:a6:0b:70:77:24:8b:87:1f:d1:ba:ef:a0:b0:be:67:c7:
ef:6c:db:fe:40:91:fd:ff:34:0a:df:c9:d7:93:b3:bf:61:cc:
46:52:cd:ce:3a:ae:88:88:da:08:61:cc:4f:bf:f8:5e:12:40:
99:30:84:aa:f6:ba:33:65:74:7b:61:ea:69:05:92:7d:9c:04:
0c:bb:8a:97:22:88:17:a3:6a:b3:7b:60:5a:6e:6d:8b:48:b6:
49:b0:ac:4d:b2:9a:0c:ad:65:aa:15:b8:8e:25:22:e8:06:30:
4c:ef:1d:c9:de:16:21:77:1a:c0:be:92:aa:2f:b6:27:fe:2b:
8d:6c:0a:d3:0f:bc:c9:06:0d:e7:c2:89:7d:ef:30:8c:ac:c8:
28:9b:6e:e2:ee:c0:11:ce:bd:2b:7c:73:27:7d:4f:54:56:00:
95:86:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:41:50 2025 by rpki-client