Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ce440fb-8466-31e0-b7df-2ee32c80d0c5.roa
File: 9ce440fb-8466-31e0-b7df-2ee32c80d0c5.roa (raw, json)
Hash identifier: dRBW1AdG+s2mkF8+Mx1obyv8XBVs1MzJ8HQ9S2pxPu0=
Subject key identifier: C2:20:F7:D9:D9:DB:43:02:96:0A:40:8C:6A:E0:EA:33:AE:17:00:0D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A25542D61149DAE608A5AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ce440fb-8466-31e0-b7df-2ee32c80d0c5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.97.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:25:54:2d:61:14:9d:ae:60:8a:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=210852e5-d641-4a7e-a884-0b9a00983867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:2b:33:29:7a:6f:1e:89:71:39:45:4c:d6:
36:7e:8b:bf:62:10:2c:23:7d:7d:6b:46:67:a3:98:
71:6d:56:c1:17:92:3c:26:86:b5:79:71:72:c6:18:
56:d8:74:af:17:aa:6a:b3:66:28:52:1f:84:37:b0:
7e:83:fe:46:c5:bb:3e:c2:b9:8b:25:8d:56:a1:84:
a1:0b:f7:fd:03:53:37:7e:56:8b:de:c1:d4:8d:61:
2e:22:49:d7:a6:f4:97:a6:ab:f2:ce:93:61:03:e5:
93:88:1b:b4:12:69:41:68:9e:4c:e8:5d:82:92:bb:
c2:83:01:c3:1d:16:96:e4:3d:d6:d0:b8:0a:46:69:
17:e6:d8:4b:a4:f3:cc:91:a7:7b:ac:cc:90:bc:17:
50:65:dc:bc:38:d3:ec:8f:dd:01:be:25:02:e1:45:
ff:ce:da:d6:ea:57:7b:70:54:15:14:4e:27:74:cf:
e6:9e:0c:a3:18:db:05:06:ce:48:16:e5:5a:3b:a7:
32:8b:65:0c:0a:bd:52:20:45:68:6a:86:ec:20:ae:
0d:ca:1d:de:69:02:13:c1:3a:c3:c5:b1:8e:b2:da:
d2:e2:f4:23:bb:ef:a8:3b:ab:df:a8:32:3c:8c:39:
43:65:a6:14:62:e9:fe:25:0c:1a:39:d0:27:79:5e:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:F7:D9:D9:DB:43:02:96:0A:40:8C:6A:E0:EA:33:AE:17:00:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ce440fb-8466-31e0-b7df-2ee32c80d0c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.97.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:c5:bd:16:01:b9:67:ae:e8:31:76:76:3b:f3:c4:03:fd:ca:
91:95:eb:e7:c9:56:77:a3:76:d5:55:bf:9e:9d:c9:b5:e1:98:
70:66:95:21:0c:8d:28:6e:35:c9:99:06:b2:e0:cc:65:14:9e:
63:4d:49:5d:4a:1d:20:e1:13:5d:52:22:df:01:6f:5b:24:7e:
09:f1:0f:94:6f:81:5c:a0:4d:38:8b:70:2d:89:c9:0b:7e:ec:
e5:21:ad:a6:99:72:f0:f2:8c:39:c3:1b:83:db:dd:da:d8:0e:
04:45:b4:c3:c9:bf:89:1f:c4:26:cb:c7:c7:a3:b8:e4:fe:48:
76:08:03:74:06:92:09:83:e6:ad:fd:3c:f2:9b:25:b8:f8:99:
cb:80:19:ad:a6:a3:f5:d4:ce:29:42:b5:31:14:2e:26:af:e5:
cb:bd:ac:78:2e:b8:66:55:63:dc:0a:6f:75:49:b4:1c:bb:3a:
07:32:61:4b:da:c0:a9:9b:51:42:05:4b:7e:c1:66:a1:98:d8:
87:cf:bc:06:29:fe:39:ec:77:58:e0:b9:85:65:a6:7a:88:8a:
00:d3:6e:33:df:6a:69:b6:f9:22:6a:70:11:87:51:d1:f0:de:
6e:34:89:73:54:52:35:c2:66:83:4a:3f:1f:8e:e7:65:8e:40:
95:8c:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:47:42 2025 by rpki-client