Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b2fe097-978b-3499-84c4-0caa713f5b2d.roa
File: 9b2fe097-978b-3499-84c4-0caa713f5b2d.roa (raw, json)
Hash identifier: lbVkZ6n0QL30w2rATGsaA2c2OtvLJNC4hhx/qf7lg7M=
Subject key identifier: 81:5D:76:1D:38:56:84:7F:62:FF:E0:53:97:D4:82:44:1C:67:C3:DE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B06564104E26B60550EEB600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b2fe097-978b-3499-84c4-0caa713f5b2d.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.116.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:64:10:4e:26:b6:05:50:ee:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=05041d50-2608-40f7-989c-b56e99ec7df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:a9:a7:24:5d:9e:df:04:ad:0d:a8:02:de:
84:29:a9:8a:49:96:c4:22:0c:45:78:74:f5:a3:4a:
e5:bc:d8:12:1d:22:5f:98:d3:99:34:23:4e:42:96:
5c:0d:16:8a:b3:bb:e8:2d:67:c9:f7:15:32:0a:6b:
f7:85:80:1c:ae:ca:76:25:46:df:3b:74:42:ac:35:
d8:cb:97:a1:bd:3b:aa:20:23:d7:87:11:ec:20:25:
a8:fc:e7:f1:e5:16:ef:c2:9d:81:13:5f:fb:32:49:
99:63:e9:30:1a:55:df:20:8f:9c:c0:fa:5f:c7:f6:
c6:3e:23:b1:a0:32:ad:99:c4:67:00:35:57:c4:7f:
73:9c:9d:28:cc:bb:63:89:51:47:44:4c:f5:2d:89:
b7:62:a8:a9:c0:52:6f:e1:1f:b5:aa:4f:27:d4:77:
44:83:c6:74:82:cc:8b:b0:23:a2:fd:8d:23:8e:a9:
1f:76:5f:4e:e1:43:84:2b:40:02:d0:ba:50:61:fe:
1c:4f:10:ee:52:17:e7:cd:67:e1:2d:dc:67:63:6f:
aa:95:06:d2:3e:1a:89:60:dd:de:dc:18:72:89:29:
3a:6c:fd:38:bd:26:7d:54:c8:0e:57:33:92:fe:24:
2b:01:15:8c:3e:ba:0c:83:b9:22:27:ec:a9:08:f0:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5D:76:1D:38:56:84:7F:62:FF:E0:53:97:D4:82:44:1C:67:C3:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b2fe097-978b-3499-84c4-0caa713f5b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:bc:73:58:ce:0b:d0:d8:5c:b8:69:6c:bd:a2:d5:68:e7:7c:
90:05:61:66:d2:d0:c0:e9:26:10:4a:94:a5:23:94:7f:d4:3e:
84:0d:a6:51:0b:89:79:71:00:61:7e:92:f9:67:21:98:82:16:
93:c3:03:9c:ed:f3:dc:15:f4:a9:dc:2c:6c:30:ea:21:a2:0b:
91:33:fc:c5:51:b4:00:b7:d3:cc:70:c8:2b:5d:4a:f8:54:0e:
4e:41:31:60:8e:41:7e:ec:33:5f:a8:ea:83:ea:dd:32:e3:99:
29:75:12:b7:7f:44:09:16:07:ec:6e:95:22:76:d8:71:ec:8c:
73:80:65:57:ac:b7:1e:3f:07:f1:2f:f7:09:e4:ba:c4:81:4b:
44:9c:da:29:a0:ff:8c:85:dd:a2:54:6f:03:97:ec:ff:a0:33:
4c:ee:7b:29:62:00:b9:14:24:a4:df:69:3d:06:e8:eb:9c:ea:
01:0e:40:46:48:c2:31:7b:06:55:0d:20:4c:f4:2a:f4:11:61:
7e:1d:50:c5:70:63:24:e9:d9:73:0f:f1:f9:2b:74:5c:27:aa:
41:cb:c0:3b:6a:04:06:a6:98:c0:97:57:f4:5c:0f:b5:27:0f:
50:f2:60:39:82:9c:af:9a:5e:c2:ae:12:e0:de:5f:1d:47:b9:
05:5a:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:21:46 2025 by rpki-client