Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f70c898-c214-342f-8b24-b32475b13a19.roa
File: 9f70c898-c214-342f-8b24-b32475b13a19.roa (raw, json)
Hash identifier: GP/6zduFt8PUgNDQurNRYtkZNtg9TeOvXDxzvV/VAaY=
Subject key identifier: 72:C1:7C:88:A7:05:44:4A:91:ED:F2:38:E3:AA:AC:77:7C:79:27:26
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A51E02EF7EA0A37C4F580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f70c898-c214-342f-8b24-b32475b13a19.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 34.116.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:51:e0:2e:f7:ea:0a:37:c4:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=dec3aa8e-fc51-4618-af53-9c2b67d3806f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:ea:e6:dd:03:6f:0a:63:74:8a:c8:ce:fa:
2d:a4:c4:54:fe:3f:b0:5b:0d:c4:0e:35:85:04:69:
61:db:4e:d5:66:87:d4:f0:fb:25:12:e1:86:1d:b5:
4f:9c:f5:3c:42:aa:7f:c6:3e:6c:f8:64:5a:5a:a3:
ef:f2:2b:b8:0f:1b:67:df:2a:09:63:bc:95:9a:49:
62:a3:ab:ef:f9:58:ad:d2:e1:2a:57:73:3a:03:67:
18:c2:78:d4:f6:b4:42:88:a7:3e:2f:9f:d8:1f:2d:
71:8c:b2:c9:4c:4a:01:0d:86:8d:e1:0f:f2:3a:3e:
f6:3d:f9:12:00:35:a6:a5:4e:dc:97:05:e8:6b:5f:
15:da:52:c9:f8:49:68:82:4d:e2:58:ab:b1:91:17:
50:3e:16:4c:0a:fa:10:07:9e:75:48:2e:ad:cc:39:
3a:67:25:66:f0:54:2e:fe:02:c6:54:6f:57:c1:24:
bd:2f:7b:83:85:c5:65:ce:23:0a:86:d4:67:05:a0:
0a:2c:9c:02:ae:34:48:a6:41:6b:70:f5:75:c3:5d:
69:d8:be:bd:50:32:f4:70:44:5f:59:a6:48:26:71:
85:34:36:24:69:47:81:2a:05:98:42:76:73:da:a8:
78:74:6e:f3:bd:3e:9c:56:c9:0e:7e:f8:67:98:55:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:7C:88:A7:05:44:4A:91:ED:F2:38:E3:AA:AC:77:7C:79:27:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f70c898-c214-342f-8b24-b32475b13a19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:fa:0b:16:a3:7e:f2:d4:23:b6:5e:b8:f9:92:9a:28:c2:37:
a8:ae:e7:a4:2f:24:ab:65:05:1b:fe:f1:9b:ac:21:e2:90:bf:
f3:1a:ba:12:d9:a9:ba:76:b6:bb:4f:b0:e4:0d:6c:d8:35:52:
57:86:0d:db:0b:66:e1:f6:2d:d7:f7:2d:59:c7:38:17:a6:e0:
34:ca:d0:63:3e:b4:29:a3:cc:44:08:1d:e1:49:f5:f5:7a:59:
a7:39:91:55:7a:cf:5a:e3:c5:06:d3:d4:e0:32:e7:1a:77:b6:
a0:6f:d3:2c:f5:cd:70:a8:f4:92:b2:75:74:d1:f3:9e:02:a5:
7f:d5:2d:8c:3c:88:1c:78:ef:4c:ad:69:27:5c:20:f1:94:73:
59:8d:24:af:d2:48:a9:f6:00:10:48:5e:da:c4:08:c5:09:82:
62:d5:55:63:97:ef:1b:8d:80:83:be:63:53:25:75:f7:4d:ef:
f3:b4:28:fe:7b:b7:57:49:88:0a:dd:bd:59:51:03:f3:f8:c8:
60:ff:14:2a:c3:5c:ac:4d:e2:77:66:2f:9a:47:aa:c6:d8:57:
a1:49:80:c9:4c:2c:fd:f5:c6:76:5d:33:9d:e5:3d:b0:9e:a8:
04:59:02:bf:6a:1b:d4:bc:bc:1e:1e:37:30:ad:dd:b0:c5:58:
f1:4a:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:37 2025 by rpki-client