Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2d63b6d-eed6-33a7-8921-98082b24cbfc.roa
File: a2d63b6d-eed6-33a7-8921-98082b24cbfc.roa (raw, json)
Hash identifier: MCvn9TvcO74dHhUCn/JPWYCmTl8ZCtv2r4eaggv9coo=
Subject key identifier: 36:52:C4:21:76:D2:AA:69:0A:0B:89:48:2B:9F:DE:96:D2:4D:70:CA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE611FBA73ADD8C2DEF17560
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2d63b6d-eed6-33a7-8921-98082b24cbfc.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Thu 12 Dec 2024 05:00:00 +0000
asID: 396982
IP address blocks: 34.34.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:61:1f:ba:73:ad:d8:c2:de:f1:75:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Dec 12 05:00:00 2024 GMT
Subject: CN=fa2dfcb2-41e1-4ac6-a139-6cc0ab5e4a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:8d:42:8e:6e:37:27:c3:8f:ef:c1:14:cc:
a0:0e:61:ff:7a:47:72:e8:70:4d:ef:27:24:2a:26:
b6:14:18:16:e4:43:a0:f1:b7:ae:38:a2:f1:44:80:
f5:99:25:65:73:21:e2:18:a5:66:53:1d:3c:d5:e0:
88:0f:55:eb:a6:31:f7:2a:e5:98:b0:9d:68:38:68:
a5:fb:54:16:6c:02:8a:7a:33:48:8a:a0:81:b7:f3:
24:76:67:c3:f4:8d:5a:cc:2a:3b:bd:eb:94:ab:0e:
63:14:5a:04:49:1a:5d:10:2b:f3:d0:67:a7:e7:30:
ec:c3:47:7b:49:4b:8f:e7:09:72:8c:73:0c:8b:7e:
32:27:85:45:cf:db:d0:1d:b1:a9:e6:11:69:d0:b3:
3c:d1:bd:26:c8:a3:c0:f5:1e:aa:86:c4:4c:66:3b:
19:3d:1c:8e:a8:95:07:d4:11:e6:eb:05:7a:d6:d7:
c1:5c:eb:67:96:f1:7a:f0:ea:48:e3:0b:06:11:56:
5a:34:88:d8:22:68:82:d1:23:f1:9c:4c:36:d1:4f:
ad:b5:03:42:e0:b3:ec:39:62:6e:97:29:d5:03:9c:
b5:20:8d:1c:35:0a:54:58:de:39:26:8b:93:75:21:
e4:dd:f5:3c:23:53:6e:ac:b6:3d:59:57:57:bd:2d:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:52:C4:21:76:D2:AA:69:0A:0B:89:48:2B:9F:DE:96:D2:4D:70:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2d63b6d-eed6-33a7-8921-98082b24cbfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.34.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:99:79:ae:3f:d5:8a:98:a4:10:8c:1c:0e:8b:46:59:51:96:
36:7e:7c:2d:71:49:32:8b:b7:00:ad:a1:98:c6:84:ef:15:3a:
a2:46:38:85:e3:af:21:e0:d6:71:12:2a:65:41:26:ae:80:0d:
f7:13:95:31:c3:7d:a1:6e:3d:fd:6a:19:4b:0e:8a:a2:02:29:
c9:d5:58:05:97:a9:87:b5:39:92:9f:b0:44:a8:1d:85:8b:6d:
52:56:ce:68:a7:dd:fd:6c:c1:d3:3e:5d:08:ae:27:d3:a3:f5:
0e:99:03:9f:6b:9b:2e:4c:f0:00:16:f1:2a:96:4a:3f:e8:31:
e1:d0:09:13:cb:b2:64:8c:dc:78:15:10:65:e6:e7:17:37:97:
3b:1b:46:cf:e3:83:4c:61:9c:ea:01:c7:65:23:16:59:08:2b:
25:6b:c1:59:b3:2d:94:2a:63:e7:83:9e:31:78:d5:4c:84:cd:
0c:fc:e4:85:92:97:46:5a:e3:a1:cb:fe:e4:29:5e:a8:15:74:
88:15:33:83:8e:9a:ab:c8:a8:a0:73:e1:70:bb:81:3f:61:8c:
0b:10:4c:a3:c5:2b:a4:3c:da:8a:94:38:bb:f9:04:5b:d6:76:
3c:ae:4a:23:81:d0:42:1a:1e:d9:23:86:19:6a:45:43:1c:56:
d1:74:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:59:02 2025 by rpki-client