Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4ab4dc9-cc34-3c13-9f62-d0582498d0d8.roa
File: a4ab4dc9-cc34-3c13-9f62-d0582498d0d8.roa (raw, json)
Hash identifier: acdl4Xf9RFYShUFx7TSFpCqTKxRZ5goObbNlX3VF060=
Subject key identifier: 5B:95:39:93:50:B6:14:95:86:E7:FB:6E:76:A0:77:79:4F:90:BF:E6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F8D33C9F45B676A8D274C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4ab4dc9-cc34-3c13-9f62-d0582498d0d8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.143.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:d3:3c:9f:45:b6:76:a8:d2:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=77e1d4e6-561c-48ce-9141-10914879e794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:e0:b5:1f:77:2d:e9:a8:a6:9a:c9:1a:53:
9f:08:d4:10:b3:77:b2:41:a5:54:59:c0:a4:da:14:
79:5b:e3:3b:58:df:16:a5:18:02:6a:86:07:3a:1e:
27:96:73:05:c1:4c:e9:f2:b5:36:3c:83:53:ff:cf:
f9:5a:68:28:f4:49:41:69:59:de:20:23:af:b1:fa:
a6:93:77:8b:5d:4a:4c:91:c9:4e:10:91:e7:12:7a:
4b:e2:a5:23:10:51:24:69:fb:1d:ba:68:9f:d5:95:
2c:6d:c6:0f:7e:a4:99:12:c7:ff:55:47:1d:f8:57:
c1:30:9f:ff:eb:2b:88:e4:11:b9:49:91:58:54:f7:
03:58:5c:47:db:3e:db:b9:96:74:64:39:10:19:18:
cb:6a:fd:1a:d0:db:b0:4b:97:79:ab:d1:d8:db:93:
e1:26:72:22:69:e0:0c:45:d8:01:27:24:30:8a:f9:
fc:c4:17:d9:76:7c:58:77:d5:0a:02:82:d7:c7:70:
f0:7f:6f:4a:a9:29:01:a0:f9:6e:b2:f8:bc:38:ed:
09:48:47:e9:0f:6d:02:9f:d1:07:c3:78:f7:75:cf:
56:46:5a:bf:76:3d:8f:0c:31:ee:fa:6b:c6:f6:f4:
14:05:2a:95:7c:23:c6:5f:c6:a7:e1:3e:73:40:33:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:39:93:50:B6:14:95:86:E7:FB:6E:76:A0:77:79:4F:90:BF:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4ab4dc9-cc34-3c13-9f62-d0582498d0d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:7d:b4:bd:e8:9d:60:0e:d1:d9:ed:fd:bd:41:99:3a:29:68:
f5:6e:56:4b:88:a1:a0:c6:25:8e:0f:c6:67:42:07:fc:fa:18:
a4:c0:d9:6e:ee:20:97:8d:8b:a1:d0:87:b3:53:6b:79:a4:96:
81:76:6a:71:7d:43:d5:b2:ee:f7:2c:bd:8b:59:4c:3c:49:29:
04:c0:41:5f:ec:96:e1:24:14:15:93:3d:08:76:b5:d4:80:cf:
39:81:39:1a:31:ff:73:91:8d:7c:b0:48:38:e8:f6:72:dc:1f:
29:58:6f:26:f1:c4:6a:ca:fe:b3:0f:9f:7a:45:8c:b1:41:66:
45:2d:ab:48:27:25:cd:94:79:36:a2:81:2a:46:2b:a8:4e:59:
62:a6:dc:d4:ba:4a:96:91:b2:05:49:e7:d4:8c:08:57:ad:e1:
86:d1:b6:84:8c:78:1c:d3:d4:06:25:d2:48:dd:6c:2a:a5:36:
41:bb:a3:d3:33:73:fd:83:85:0f:e2:dd:a6:5a:65:82:1c:95:
b7:db:e6:52:71:88:25:e7:da:f9:84:d9:78:98:45:bf:96:b1:
41:e8:7c:6b:18:e7:e0:e6:b4:93:4f:70:dc:f7:63:67:cf:62:
9f:67:2a:42:2d:02:e9:a9:d5:02:88:aa:1c:e3:0d:14:6b:d1:
9b:a9:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:34:33 2025 by rpki-client