Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6975a51-b05a-33d3-ae28-186611eb5d65.roa
File: a6975a51-b05a-33d3-ae28-186611eb5d65.roa (raw, json)
Hash identifier: AcwyQSzhfSwTaEi9cT/A9wcX8bro+cvPZJwdWHlNOwg=
Subject key identifier: 3D:18:4A:45:B0:32:60:19:4D:A1:83:C6:B9:D4:F1:EF:13:4E:59:D9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720ABACEF216A1DC2F245080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6975a51-b05a-33d3-ae28-186611eb5d65.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.170.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:ba:ce:f2:16:a1:dc:2f:24:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=e110a456-de38-4bb8-a616-24316ed35c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:f2:c2:47:e4:26:8d:28:c3:d8:32:21:25:
9c:a9:73:f3:49:94:0a:c1:04:d8:b6:93:62:b4:81:
35:24:69:23:fe:70:09:40:86:bc:48:01:6c:46:16:
cd:e6:eb:25:f3:75:9a:5b:36:2a:b5:67:5e:f2:32:
11:ba:52:cd:81:04:ed:d2:63:20:06:bc:0a:a7:ec:
fa:f3:27:52:93:d6:82:bf:0e:08:d8:29:a4:68:5d:
cb:a2:a7:42:84:ba:70:df:0b:0a:86:a6:0c:46:9b:
ab:56:e1:a9:55:18:af:e1:1b:cc:14:95:c5:c3:7e:
82:f6:33:b2:b9:a9:fc:ef:41:4d:f7:5a:a3:99:4d:
73:36:1b:57:6b:4d:32:2a:e3:ea:3a:31:74:5d:7d:
f2:42:b4:91:c3:ce:68:3d:88:df:1f:e5:d9:f3:62:
71:27:0a:ac:15:e7:3c:5c:c0:49:b2:25:82:4e:72:
79:98:5e:f1:65:fd:03:64:e7:be:2d:ea:45:e3:7c:
92:25:05:aa:d7:5b:fc:2d:82:f7:d4:bb:49:41:26:
32:a3:3a:10:83:03:9d:ad:31:02:53:a4:48:0d:b4:
ed:84:bc:d5:97:1a:e1:64:e6:98:98:72:24:07:c5:
23:03:fd:d1:27:26:30:10:b4:6d:bc:4c:24:48:5d:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:4A:45:B0:32:60:19:4D:A1:83:C6:B9:D4:F1:EF:13:4E:59:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6975a51-b05a-33d3-ae28-186611eb5d65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:5d:11:ec:17:23:67:fe:bf:47:85:d1:ad:47:b7:af:fb:eb:
1a:fc:3f:ba:ad:a5:b4:06:12:b9:27:76:2b:ff:aa:e0:57:fe:
d6:e2:49:74:fb:61:57:66:af:3b:e8:92:cb:87:57:cc:55:41:
85:4c:2d:7f:17:68:17:e4:e9:57:ff:6c:8e:49:ca:d1:a1:49:
40:57:91:73:2d:fb:48:a4:3c:44:3e:cc:f9:be:de:a8:07:d3:
64:31:ee:16:91:e0:fa:d1:af:3d:16:d9:04:71:cf:46:20:c4:
34:0d:0e:cc:37:08:f8:58:36:a8:e7:d6:8d:f9:9d:b4:bd:1a:
f5:a4:e4:be:4c:a8:68:64:b8:1c:8a:7b:76:70:89:1b:e1:26:
bd:af:f8:c5:32:ef:cf:d3:66:e8:c9:7e:b4:b8:7b:8e:ca:4f:
6e:de:ff:e2:d8:5e:95:b2:f2:d6:23:69:4b:e6:eb:32:e7:66:
7d:b4:d7:5b:b8:dc:f3:71:af:b1:bc:8e:73:99:41:28:9a:a2:
e4:7a:41:78:74:1c:cf:fe:28:51:38:41:1c:12:4e:3c:f8:7f:
c3:95:0e:a1:62:9f:ec:2b:40:82:f0:60:8f:4b:44:4b:9f:9a:
1d:61:a2:a8:ba:90:94:a2:4e:44:0c:5a:e6:cc:50:55:af:52:
71:6b:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:23:00 2025 by rpki-client