Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2034a11-1b45-3597-98f5-11f2ccee4962.roa
File: a2034a11-1b45-3597-98f5-11f2ccee4962.roa (raw, json)
Hash identifier: +8aXSJN1WUMrT2qCmajmRwm8Po60T2oq5ZsM4xzil6M=
Subject key identifier: 99:97:9E:24:1B:2B:D8:6A:8B:B2:47:77:DC:0D:45:75:E4:CE:A0:F4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A274BBB6834019C18665900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2034a11-1b45-3597-98f5-11f2ccee4962.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.94.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:4b:bb:68:34:01:9c:18:66:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ea8945bc-e9b6-4597-899d-6761280e2e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:76:ee:b6:d0:f7:a1:ad:b5:56:92:bf:44:
68:4c:1c:bc:84:5f:ad:4e:f9:f0:dd:5b:70:14:1a:
63:77:b3:c8:7a:11:b8:20:12:73:09:5d:73:57:db:
45:6e:c5:86:f1:db:fd:89:9d:2c:a3:a1:a3:9c:dd:
22:b0:44:98:74:a0:bf:9e:c3:a8:4d:16:6f:30:ba:
56:56:9c:66:a0:28:d8:d8:f8:63:4a:56:95:26:71:
45:55:4e:3e:75:8e:40:33:db:f5:34:0d:dc:3a:19:
0c:68:4d:0e:f3:42:f9:70:5f:9f:d3:c3:79:48:e1:
7a:78:26:e6:67:92:c6:2e:27:72:2e:0e:b2:33:d2:
9f:aa:4f:bb:c6:61:b7:27:9d:0a:39:0c:18:cd:99:
8c:83:df:93:03:7a:fa:1f:be:f3:4e:61:70:33:7f:
d1:65:21:49:0a:98:23:73:65:82:1a:7b:fb:64:d1:
7a:60:e3:37:ba:86:37:dd:11:94:37:1a:be:c1:c1:
18:f6:57:f2:c5:3b:04:e8:e9:51:0f:4b:1d:b5:dc:
ee:ff:03:b3:11:37:d9:dd:0f:eb:b5:02:4a:31:90:
44:27:6f:f2:a6:f7:8a:e2:21:bf:f8:b9:99:73:23:
85:6e:34:6e:09:d1:38:a1:fa:15:bd:d3:99:17:df:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:97:9E:24:1B:2B:D8:6A:8B:B2:47:77:DC:0D:45:75:E4:CE:A0:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2034a11-1b45-3597-98f5-11f2ccee4962.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.94.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:7e:03:66:27:29:3d:94:a9:65:88:5b:2f:ab:07:2b:cc:cd:
f3:96:d0:18:fc:c6:6e:4c:12:f9:13:f3:d7:ba:81:72:f9:67:
ca:6a:97:2b:23:11:9d:2d:90:05:98:e0:f3:f1:db:eb:bf:93:
c7:9d:e4:94:e7:18:20:d5:78:d0:86:62:2f:db:ab:d4:3b:4a:
57:22:48:e7:76:32:f7:8d:3c:13:44:83:94:57:27:73:b0:ee:
d1:1d:3a:73:fa:a2:ec:54:33:c7:3c:4a:3d:72:7f:38:97:23:
e5:1b:62:02:fa:1e:8a:32:84:ed:85:bc:e5:79:ed:42:2c:52:
9f:bc:e7:a2:9a:36:ab:22:22:c0:f6:49:cc:3f:d6:ce:7b:60:
63:f1:73:94:ab:a1:5c:e7:2f:a6:6c:e8:d6:a4:fe:40:18:36:
49:11:87:38:36:94:0d:cb:0e:2b:3f:7a:1e:94:36:be:e5:c0:
a4:5e:0c:be:83:f8:d1:f4:c9:49:23:b3:13:e5:56:0b:e0:e7:
56:ae:15:66:df:c3:c9:70:2f:5d:4f:e8:99:ee:81:1a:0e:cc:
5e:7a:bf:24:a9:d4:48:19:09:3d:72:c4:f5:a9:95:0e:41:61:
be:88:25:34:94:96:a5:47:f5:e4:49:66:92:d9:b8:4c:c1:b9:
8e:d3:7a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:00:43 2025 by rpki-client