Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1ec0570-e0c7-31a8-99e6-5e5368ed78e6.roa
File: a1ec0570-e0c7-31a8-99e6-5e5368ed78e6.roa (raw, json)
Hash identifier: Jxrk/h+is/TTPYtpII2FXxSGbBjonoiuBTldj1bxOoQ=
Subject key identifier: 5C:1F:EE:01:24:59:E3:DE:A3:36:32:0B:A8:7B:1C:6B:C3:D8:4A:A8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A24A8378B26F12260332B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1ec0570-e0c7-31a8-99e6-5e5368ed78e6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.108.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:a8:37:8b:26:f1:22:60:33:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8c844351-2864-4cae-aa75-f63cb136f860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:62:20:f2:d8:6f:16:fb:ba:eb:80:5d:24:
2e:5f:75:39:a4:94:0c:b1:c8:d3:d1:98:14:b8:59:
0f:fe:6c:6d:77:44:48:39:7f:01:3d:16:46:b0:af:
02:00:f0:62:76:6b:54:d8:10:e6:da:c8:33:5c:d0:
a2:cf:8e:ec:43:a5:30:a1:4e:42:f8:3c:fd:2d:69:
f0:2a:52:8c:2a:df:58:7a:14:92:51:b6:41:42:f3:
36:c9:da:41:47:83:b8:2f:59:8e:3e:4b:72:1c:19:
48:5c:16:d1:87:da:ab:3b:b2:51:5e:fc:2e:54:32:
04:65:5f:d1:47:28:c0:ce:79:62:74:bf:35:f4:75:
b0:cb:fa:48:71:57:00:e5:21:db:ef:ce:a3:84:b0:
74:c2:e5:96:cc:09:09:80:c8:15:f8:20:9e:dc:6d:
a5:f9:ed:dc:cb:67:c6:bf:78:42:89:be:58:7e:37:
fa:5d:2b:6e:8b:21:a6:f1:0f:fa:6e:e0:32:a4:a2:
77:55:e4:c2:00:d3:e2:85:c1:50:ae:6c:ac:db:c4:
64:6a:a8:3d:a1:dc:a7:40:e2:8f:ec:0a:67:c1:34:
52:d0:0e:39:6a:c9:f7:3c:83:67:5e:e0:c4:bf:f8:
28:b9:11:aa:c7:8e:9b:bb:7f:d7:df:99:40:4c:0c:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1F:EE:01:24:59:E3:DE:A3:36:32:0B:A8:7B:1C:6B:C3:D8:4A:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1ec0570-e0c7-31a8-99e6-5e5368ed78e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.108.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:aa:f3:07:cd:2d:3d:f1:ad:98:89:ff:b0:f3:85:21:da:2f:
cb:22:40:d6:e6:45:11:52:a2:69:8a:a4:5e:e9:d7:31:dc:7b:
00:40:73:34:5f:d9:c2:7c:3e:3c:e1:0a:b7:13:f8:58:bd:3b:
80:d7:34:51:e3:a6:8c:25:0b:34:76:41:9f:ee:0e:19:20:6c:
7a:35:a1:41:67:a3:9f:a6:9b:bc:ca:d8:23:68:80:78:9a:83:
e6:f1:5f:0b:a8:45:62:b1:0e:85:20:45:51:7e:9e:35:26:34:
20:b7:03:9b:55:16:6f:6e:5b:e5:46:70:77:db:e2:1a:69:31:
8f:d8:be:4a:a2:73:ac:f8:12:b0:44:f9:87:9b:a1:48:e6:2a:
46:79:21:17:6f:fd:cd:cb:ab:87:17:9f:20:50:a8:9b:98:64:
fb:50:ba:35:25:fc:3f:e1:c0:48:4c:34:34:b8:46:f5:9a:41:
94:39:48:f7:43:de:fc:b2:24:5c:ab:5e:44:b4:40:1b:84:7a:
0a:af:28:72:65:36:b4:39:f0:90:79:15:8f:25:4d:06:77:d3:
67:2d:0d:26:d9:d9:80:06:cc:72:23:ab:09:42:4d:8c:aa:a9:
78:4b:3b:ef:39:91:7b:62:5f:5e:fd:2f:cc:c6:ca:69:dd:51:
55:99:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:25:23 2025 by rpki-client