Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6449ba3-6773-3fc6-803c-fedd0b978608.roa
File: a6449ba3-6773-3fc6-803c-fedd0b978608.roa (raw, json)
Hash identifier: p70YdtF1vVP7QoK8f6nalXkKtnBWRMMh7Ac8SBWcNmg=
Subject key identifier: 66:D4:10:B4:2B:27:58:D0:48:2B:1F:82:8D:63:52:C2:90:41:46:51
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EF0FA2DFD3A30D82CE4900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6449ba3-6773-3fc6-803c-fedd0b978608.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:0f:a2:df:d3:a3:0d:82:ce:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e5521368-b530-40f9-bad7-9b369da99fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:f2:61:f7:ec:f7:46:2f:d0:3e:b3:6c:80:
39:23:d3:8d:a3:82:33:2c:c8:98:bd:73:46:f0:0d:
fc:a9:dc:0a:82:1c:02:c0:4a:58:e3:b3:15:e0:af:
b0:2b:5e:9f:07:8d:53:38:e0:e0:93:27:f4:40:3a:
15:d7:71:0f:4f:e6:65:f9:ab:26:af:74:61:7c:48:
a4:4f:65:0b:60:08:dc:fb:b9:ea:3a:03:bd:c6:98:
cc:61:3d:af:55:f1:d8:94:7a:0e:8a:82:7a:47:1e:
a4:63:7b:48:66:45:d7:3a:de:ba:36:e0:21:ad:92:
f7:32:4a:2a:fa:f6:ab:71:9a:98:a8:28:41:0a:40:
6e:7c:da:21:51:79:3e:f0:fd:ba:31:ad:b0:8d:52:
c4:77:1c:62:4e:a3:df:00:6c:de:79:c1:09:f2:40:
75:99:9b:4f:cc:82:3e:ce:da:d5:d6:67:35:0a:08:
65:3b:79:e9:3b:86:bd:b0:14:8c:4d:4f:3f:f4:e9:
1f:18:fd:c9:ad:4c:f7:02:55:34:d6:98:10:85:4b:
f6:84:1a:00:b9:9f:f3:70:53:64:37:35:97:58:dc:
fe:13:3f:f4:aa:48:15:1e:4d:0a:cd:e4:4f:b6:b1:
24:8f:2b:32:78:36:21:bb:d5:57:45:d1:d6:21:22:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:10:B4:2B:27:58:D0:48:2B:1F:82:8D:63:52:C2:90:41:46:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6449ba3-6773-3fc6-803c-fedd0b978608.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:a2:8a:5f:cd:5b:7a:0b:00:b1:e3:55:9b:57:af:fd:70:a0:
e6:50:4b:5e:5b:0e:5e:2f:f1:40:4e:22:d6:59:c3:b6:0a:e3:
54:22:6f:ca:c9:23:b3:0c:0f:87:56:88:b8:73:fc:e4:92:e1:
b5:91:c7:c0:94:ad:a3:cd:b5:75:99:2b:00:46:91:00:62:5e:
59:46:b3:b0:a8:43:4b:72:47:f0:54:28:2c:87:07:21:28:9d:
fb:ab:79:6a:c7:ea:ba:62:46:a1:01:44:e5:6b:ef:ec:4e:7a:
3b:b2:36:22:b0:04:0a:77:f1:f0:9d:10:5b:b3:4b:fb:34:40:
7f:e2:19:43:48:b8:18:c8:80:0a:60:ee:8d:1a:75:8f:64:21:
38:8c:8c:38:51:fe:c0:78:5c:90:57:bb:fe:0d:e8:c2:83:35:
7b:77:91:6d:48:46:20:03:be:74:37:ab:d1:48:c8:44:86:0a:
8d:36:68:33:62:bb:17:58:58:96:13:53:41:71:41:2a:e8:5e:
c6:10:d3:dd:1b:44:dd:10:d2:6d:e3:83:19:8f:57:39:54:2d:
e2:cc:dc:7e:74:74:3d:ac:9b:1d:d4:9f:e2:a1:87:65:7f:42:
3f:4d:95:b6:cd:0d:86:1e:7b:5f:6e:df:5b:93:aa:98:d6:e7:
50:fe:f3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:43:25 2025 by rpki-client