Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a522dd1e-2218-395e-95eb-c6542dfce700.roa
File: a522dd1e-2218-395e-95eb-c6542dfce700.roa (raw, json)
Hash identifier: D+pIH0nPCcKGHSWKjbGDaJCcrF2HfuQTEwFy8KF71Qc=
Subject key identifier: BB:D1:B3:9D:AA:04:E2:99:43:FD:E4:71:D7:BC:EA:1F:B0:79:1E:FD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F64621418DA541F7FC4760
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a522dd1e-2218-395e-95eb-c6542dfce700.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:46:21:41:8d:a5:41:f7:fc:47:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=12edc738-4386-4d25-837d-43efd2e1e939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:bc:8f:49:90:d8:07:32:2d:30:18:7a:c5:
1f:88:d5:70:4a:a4:01:5f:c6:10:1d:cd:12:79:91:
7f:40:e6:f1:08:98:77:6e:8f:9c:2c:b9:87:e4:34:
f4:00:a9:b2:ea:0b:02:a7:28:47:88:fd:97:e1:43:
a5:a8:2d:4b:e6:5f:7f:8a:f0:cd:d2:ba:ce:72:2a:
59:5c:6f:b3:53:21:8c:cd:8e:33:e7:ed:a5:22:c2:
67:45:0b:a3:39:86:ed:af:71:27:7a:b4:80:71:60:
6f:01:80:8d:da:ac:b4:e8:8a:e1:4f:68:ed:cb:4a:
b4:ad:4e:3e:f6:31:e2:53:27:39:e1:3c:4d:05:83:
a8:fd:8a:16:8b:08:01:0b:d3:01:cc:f7:e5:f1:dc:
ba:b7:fa:75:a2:2b:bf:eb:77:8a:f6:51:0b:5b:53:
8a:a4:45:48:3f:84:54:cd:04:bf:5a:2a:71:28:72:
77:04:3d:e1:5f:4f:65:88:3b:a1:d5:89:54:de:a5:
f5:0d:c8:81:f5:86:21:cb:6b:09:da:04:bf:21:62:
8f:40:0d:88:c1:75:8a:5f:b2:19:82:ea:36:f4:c7:
23:e0:4c:56:14:ba:8b:ae:b4:a5:9f:0e:d5:02:e9:
d1:20:42:76:62:2a:a0:ce:b6:1b:f7:c5:10:f3:7f:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:B3:9D:AA:04:E2:99:43:FD:E4:71:D7:BC:EA:1F:B0:79:1E:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a522dd1e-2218-395e-95eb-c6542dfce700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:f9:e9:60:b0:17:72:06:39:92:31:3e:eb:4c:7b:6f:1c:10:
49:86:6c:2e:f3:ee:86:84:27:96:5f:69:3a:55:7e:f2:2d:5a:
26:cd:da:2e:e6:dd:36:27:da:2a:82:b2:ac:78:90:0e:d6:8d:
46:d3:2b:a3:67:dc:ca:2b:ac:05:26:91:d4:bb:67:6d:8c:06:
fd:54:fa:b5:8e:c9:40:b0:ba:7d:fd:8d:84:53:ec:a0:9a:61:
ee:a4:17:23:8a:a6:7b:7f:1c:8f:95:3e:d2:c2:8f:75:af:7a:
c2:64:8e:b0:f5:d3:7a:33:83:0f:b7:9a:46:29:5a:88:7f:5c:
5e:68:06:28:84:0f:68:aa:ce:3f:df:b3:f0:95:b6:09:28:76:
e7:ae:13:e0:b2:4f:63:da:3c:cf:51:6b:aa:a3:8a:2c:23:d6:
bf:f1:3c:16:6e:2f:8b:ed:6e:b9:b3:92:bd:52:20:59:76:e4:
6b:3e:84:f1:8d:3d:ec:65:fe:0a:c9:ae:9f:d9:5c:de:1f:fa:
c3:e9:7c:b0:32:c3:86:90:97:4f:3d:86:6d:14:3f:9e:46:10:
53:94:5e:54:e3:42:ed:2a:54:3e:b6:c7:6f:e9:37:0c:82:3c:
e8:c0:81:91:d5:8e:98:12:7a:b8:0f:5c:45:a9:33:f5:7a:1e:
83:c9:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:03 2025 by rpki-client