Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3b133dc-c836-3b03-9b69-3e68b405609e.roa
File: a3b133dc-c836-3b03-9b69-3e68b405609e.roa (raw, json)
Hash identifier: gY2Mndrwo6RWx6fAUG5EzPKhbEK3gLCnTH0lMEJFb5A=
Subject key identifier: 02:D8:DB:18:25:E7:4F:B6:02:07:61:20:29:E5:B2:CC:43:AB:EF:42
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842B065D9EF3EE04BA8CE8A6253
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3b133dc-c836-3b03-9b69-3e68b405609e.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.64.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:d9:ef:3e:e0:4b:a8:ce:8a:62:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=a3e06560-aec9-4168-9426-134f1ccb93aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:ec:b6:fc:48:77:e6:24:4b:59:d4:a6:ef:
d2:f4:f4:52:4e:8a:95:68:11:3f:d0:cc:9f:38:5c:
17:ab:80:67:85:6e:b7:cd:1c:95:eb:3d:ba:9b:27:
c8:a6:0c:02:38:0e:5b:08:71:c4:74:ce:9e:29:f8:
41:32:ee:9e:b2:b6:ce:d4:7c:d3:32:56:64:4b:d3:
5e:b7:fb:c4:97:3a:e1:ec:9f:7a:e7:eb:a4:a9:c1:
b9:77:e1:f6:97:b4:ef:d8:05:35:b6:8e:4d:cd:45:
3a:45:56:9f:1e:60:6d:3e:1c:cb:3f:fe:78:1b:2f:
88:3e:1f:e6:64:10:d5:49:bb:54:9e:98:60:e2:25:
c6:8c:28:bb:4d:4f:ed:75:30:d2:f9:73:77:f2:fc:
16:b6:36:4f:fe:ea:de:a3:3d:4f:bc:22:4c:92:82:
fe:d0:23:f7:7a:e8:67:96:1b:7a:0f:d6:ab:c1:d3:
b0:89:75:97:bd:f4:18:1a:0d:c4:89:a5:1c:e0:22:
8c:f2:93:5d:b1:de:46:07:d4:82:b3:b3:7b:d2:02:
e5:fd:f1:54:77:b8:7d:3d:71:ee:4f:d9:3a:73:7c:
cd:ec:f0:4d:d6:7a:26:5a:07:9f:3e:bb:6b:6b:d6:
69:e0:b1:6c:dc:f7:0e:ae:57:88:ed:aa:1d:bf:6d:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:DB:18:25:E7:4F:B6:02:07:61:20:29:E5:B2:CC:43:AB:EF:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3b133dc-c836-3b03-9b69-3e68b405609e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.64.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:87:88:90:e5:84:0e:cb:d0:d3:01:7c:a8:42:2b:3f:c6:ad:
4b:ed:d2:6c:80:5c:68:ec:05:8b:4b:08:dc:b9:77:06:82:89:
c2:54:38:f7:ef:9b:40:a0:1e:39:d8:83:0c:91:d4:ac:90:ca:
41:ff:f8:20:35:14:c3:7e:be:c4:99:f3:6e:c5:90:71:01:f9:
07:59:fc:9b:dd:87:b6:9b:d9:a8:c6:c6:23:2f:c0:f0:67:3a:
b3:12:fa:33:27:09:1b:12:5d:6c:f6:83:62:7f:b7:2d:13:5b:
5f:11:4c:74:64:e0:cd:06:9e:c1:3f:9f:39:9b:d3:82:ba:90:
61:dc:78:d7:2c:a7:80:3d:99:a2:35:58:17:1b:4e:f2:4f:76:
28:ea:77:91:82:66:29:7c:25:b5:a3:8d:2b:8e:6d:60:39:6f:
f4:d1:04:24:2c:9e:3b:fe:1e:3d:d4:83:8f:72:60:39:c3:11:
da:1a:7b:32:00:96:57:a0:ef:00:f7:0d:cf:e2:eb:82:b7:39:
e5:fa:a0:cc:fc:be:a4:40:d3:5c:af:d9:c5:95:18:75:50:fd:
c8:a7:a9:93:95:12:40:4a:71:ec:13:f0:1d:c3:c4:a1:a7:9e:
79:fa:19:2e:98:1c:ba:95:df:14:fd:57:62:16:ad:38:10:3b:
32:1e:9f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:27:25 2025 by rpki-client