Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0576f7d-5e54-3fa8-bb7a-71f348f2aa50.roa
File: a0576f7d-5e54-3fa8-bb7a-71f348f2aa50.roa (raw, json)
Hash identifier: IArQowtOwH1LjDUsQ+2ifFyUN/8cfNtp+JzuOk5dS4c=
Subject key identifier: EB:5B:67:26:9C:FC:4D:5D:6D:36:DE:5F:5B:71:41:78:8D:AB:77:67
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B06492431A43D5FDABB5CE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0576f7d-5e54-3fa8-bb7a-71f348f2aa50.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.107.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:64:92:43:1a:43:d5:fd:ab:b5:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=f7b6383d-ec75-4a03-96ec-98ea236ba817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:e4:4c:41:86:fa:c3:1b:a2:0d:45:14:e8:
aa:a7:9f:d9:0a:82:12:dd:ec:0e:9d:0e:bf:44:4d:
cb:f8:2a:76:11:27:38:26:77:c6:e4:62:bf:ad:2d:
7b:c4:b8:03:e5:04:83:d7:be:f3:d3:c9:3f:73:0f:
06:f4:ba:23:00:b8:ee:a4:4d:6f:8a:68:7b:17:ab:
c5:f6:46:2a:e4:31:40:25:e8:77:f1:db:19:03:1e:
6b:f5:04:ca:34:11:f0:5d:15:a3:f2:2f:5d:07:9e:
3b:42:ce:f4:dd:d5:54:0a:3e:1c:b1:1f:23:37:f6:
0e:69:4d:d1:d2:87:e9:30:39:5a:bb:de:4d:6c:30:
57:50:f7:ee:e8:12:6b:e6:9d:44:f1:a0:a8:d0:7f:
d3:01:92:2f:e2:38:89:03:e4:4d:ad:93:2a:9b:41:
8a:fa:77:21:9a:3c:1f:99:2d:6c:31:bc:9e:6c:9b:
ba:ce:47:f2:7c:2a:af:d4:cb:c9:09:03:b0:ea:0f:
22:14:86:16:e6:05:bd:56:65:95:de:fe:03:c3:8b:
42:74:87:89:fa:ff:1b:1f:ff:8b:1b:2c:43:97:8c:
c7:31:9e:1f:a8:05:af:a6:cd:e4:e2:2a:cf:2c:59:
56:59:7c:b9:5d:c2:97:1a:a8:f9:cd:53:1b:b4:0a:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:67:26:9C:FC:4D:5D:6D:36:DE:5F:5B:71:41:78:8D:AB:77:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0576f7d-5e54-3fa8-bb7a-71f348f2aa50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.107.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:45:eb:db:99:34:57:a2:7f:ea:38:f6:11:56:d2:79:18:94:
3f:8b:36:25:24:ad:7e:a9:40:54:7f:92:49:60:b5:87:13:ec:
14:2d:49:98:85:ac:75:ed:98:68:39:f3:c9:22:98:42:46:c4:
ba:b1:2a:77:0b:8a:11:d5:a8:bf:18:65:91:2b:a9:54:ee:63:
b1:4d:1d:15:9e:bf:f5:35:74:4a:a5:a2:53:32:b4:29:34:78:
db:30:67:af:93:93:47:b7:ab:41:9c:44:b2:d8:8a:40:22:69:
fd:b0:36:82:8d:a6:de:bc:73:a4:c1:54:32:54:e5:3e:e3:9a:
16:45:36:3c:34:f4:9b:53:ae:d8:86:f8:16:ab:85:9a:2f:71:
e5:2d:b3:a2:5c:66:e9:5a:f9:08:d1:96:f9:c1:f0:c2:6e:78:
2e:dc:00:79:3b:93:80:10:18:9a:19:dc:1e:86:d2:d2:29:e2:
13:1e:9b:d1:5f:08:f0:c2:ad:37:4f:e7:24:e6:50:4f:43:cb:
56:e3:bb:44:61:74:d0:96:bb:9c:de:1e:66:f9:68:eb:a9:79:
ed:10:0d:d5:d1:a4:0b:35:ef:12:62:6c:83:51:21:39:b7:0d:
2d:cb:b4:4e:8d:65:49:d5:5c:d4:34:56:28:ba:4f:6d:77:e9:
d2:78:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:59:18 2025 by rpki-client