Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a035fea2-bf8f-39e9-ab28-c39ac45d0e6e.roa
File: a035fea2-bf8f-39e9-ab28-c39ac45d0e6e.roa (raw, json)
Hash identifier: lD8cWORhXPuvNjgt+MBT3/qBDKM4aqzPQOn2lCxvyT8=
Subject key identifier: DC:1C:06:F1:2B:3B:2A:38:37:21:B4:D5:FA:62:90:CB:35:F1:CA:B4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A05FAF6AEEA23554ED21340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a035fea2-bf8f-39e9-ab28-c39ac45d0e6e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.71.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:05:fa:f6:ae:ea:23:55:4e:d2:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2145eb19-ac10-4515-afe0-6c48da191e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ad:a7:03:01:34:10:71:7e:1f:0a:29:f9:94:
7b:55:ea:03:26:c9:3f:31:cc:48:2e:c0:57:74:61:
48:d3:ce:e4:3b:6b:c3:d9:ea:e7:96:52:3d:9a:64:
f4:b6:35:d2:9e:86:b0:0f:6a:09:82:19:16:ff:e1:
f2:b8:af:d6:3d:b6:07:96:03:43:50:38:b4:04:4a:
3c:e3:92:eb:a8:d7:c2:a6:bc:06:8a:0c:2a:8e:ec:
e1:48:1c:36:08:72:f9:e6:11:ae:b5:71:1d:bd:7b:
c4:20:da:f1:d7:00:8e:fc:cd:e6:f4:b9:f1:b9:b3:
be:e5:ab:fb:75:78:59:9f:dc:7f:9c:c5:a8:07:69:
9a:55:89:9e:83:27:b5:4d:4b:d6:54:43:bd:37:2e:
43:22:88:70:53:51:d2:53:12:f7:19:ac:4f:df:4b:
a9:f9:39:7f:d8:c8:f5:36:41:b6:ee:76:72:95:7f:
c6:36:6e:18:41:c4:b6:fa:70:17:6f:52:3f:31:b2:
30:f7:de:d0:97:8c:bb:51:15:e0:7d:9f:55:41:a8:
83:9b:ab:65:5f:44:88:91:1c:41:0d:f3:85:30:a2:
2b:bc:a5:be:30:66:d1:3a:c2:00:15:65:a8:12:74:
3e:09:84:1f:71:d9:bf:fa:c0:e7:ca:c4:a7:8f:f1:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:06:F1:2B:3B:2A:38:37:21:B4:D5:FA:62:90:CB:35:F1:CA:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a035fea2-bf8f-39e9-ab28-c39ac45d0e6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.71.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:09:76:1d:ab:1d:c7:83:5f:2f:8d:9f:f5:ec:78:c2:cb:6e:
b0:85:a1:9f:e7:40:ff:36:e3:af:f4:85:d3:ec:01:b6:79:1a:
63:e4:37:20:7b:46:37:c6:06:37:5c:7a:ec:45:d6:9b:5b:6a:
10:8c:de:57:b8:5a:d7:98:fd:04:84:51:f1:d8:c6:b5:23:af:
6e:69:c3:29:c9:47:e4:d1:11:83:99:3b:24:eb:12:b2:c0:da:
fb:50:01:b2:ed:db:54:ad:06:ed:15:0a:ac:00:5a:0c:73:46:
25:8c:b0:51:af:04:30:2a:79:05:ff:30:52:7f:11:ca:ac:44:
80:5e:9a:b2:82:2b:e9:ba:df:f0:4f:81:f9:ab:5f:37:d6:ef:
86:99:1d:2e:20:bb:fb:41:21:bb:59:62:d2:e4:4a:b8:85:9e:
f4:de:76:c6:a9:c1:73:e1:1c:e9:64:dd:34:ea:2b:dd:c9:6f:
f3:59:e9:43:94:46:13:00:b1:84:b7:8b:52:8a:29:3f:9c:5f:
3f:13:df:d5:82:18:1c:39:63:38:ef:f7:70:d3:85:97:16:95:
13:9c:80:85:0c:95:1a:94:c7:33:6d:9f:94:7b:15:13:4a:af:
5b:58:37:f9:9c:6e:bc:ef:5a:37:a4:6d:f0:fd:01:a0:e5:2b:
f1:82:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:06:30 2025 by rpki-client