Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7bf65f9-99ba-3f47-a3e3-4e425f9009a2.roa
File: a7bf65f9-99ba-3f47-a3e3-4e425f9009a2.roa (raw, json)
Hash identifier: D3Zo7nQLbZX+pe8C0KgbMpk1B7JyGN5H4/lSFGB9dgw=
Subject key identifier: EE:E9:C6:86:B5:EC:D0:96:17:89:1D:8C:C1:60:C2:01:B4:6B:63:E2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0E0ED81EAC0B259A364100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7bf65f9-99ba-3f47-a3e3-4e425f9009a2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0e:0e:d8:1e:ac:0b:25:9a:36:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bf800f41-a1bd-4492-b47a-65551ee636be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:35:1f:af:4c:0d:c0:b3:b0:9d:c2:28:5b:
ff:f7:55:16:3b:cd:63:9d:98:b9:01:91:29:a4:fc:
90:49:54:93:5b:0e:f1:6f:53:2e:c4:1c:52:66:87:
ca:bc:0c:64:d8:e6:c6:5e:e8:77:75:a4:f9:de:4c:
2d:9b:30:6a:5a:8b:cd:5f:ca:db:86:f4:77:ba:16:
69:73:74:c5:67:85:59:e3:cc:ea:57:5e:c8:03:86:
76:a4:09:80:56:6e:b1:36:45:be:99:60:c6:fc:41:
b5:a3:58:3d:a7:21:b7:a1:07:96:bc:bc:40:c0:d2:
c9:4a:a9:1e:ea:2c:33:0a:db:7f:b7:bc:9d:54:96:
8e:c2:df:a8:24:fc:3d:c9:b5:ea:4c:18:24:0f:ec:
de:97:51:94:b0:fd:36:f3:55:d2:10:08:19:ba:2a:
cf:b8:dc:c1:b9:8e:01:92:af:3f:4d:ac:f7:ab:5e:
3b:f2:08:3b:d8:19:60:0c:82:93:e0:b7:00:20:be:
f5:13:3a:35:a5:15:c1:b7:0e:ba:ad:71:47:ae:dd:
6b:58:13:7c:2b:0c:a2:6c:9e:51:f2:22:ae:08:fa:
9a:bd:6a:19:19:7a:a8:50:7f:c8:58:40:42:ed:aa:
25:60:f1:2e:34:14:81:48:2b:ce:05:58:2f:58:d8:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:C6:86:B5:EC:D0:96:17:89:1D:8C:C1:60:C2:01:B4:6B:63:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7bf65f9-99ba-3f47-a3e3-4e425f9009a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:8d:d5:32:85:a7:eb:34:05:a9:55:b6:ba:68:17:38:bb:12:
cf:0e:af:5b:a7:ed:1f:4a:f3:cc:b8:dc:23:68:07:5e:59:ab:
54:5a:c7:f2:df:64:ee:65:54:02:58:94:3a:31:9e:07:99:ff:
af:36:97:09:90:f0:a5:60:da:60:7f:46:44:72:25:b9:05:a5:
67:62:b7:6d:0a:fa:13:3b:02:57:7a:12:d4:09:a5:c6:08:31:
3a:4e:08:1f:de:69:dc:39:41:40:cc:0e:1f:c6:d3:f3:50:61:
df:8d:b3:a8:8d:9a:24:cc:81:4d:ee:77:28:ce:6f:e1:2c:d0:
08:40:f6:4d:57:6d:3a:31:4a:dd:a5:dc:eb:6f:b1:b0:79:c1:
ed:5e:0b:58:fc:44:cc:8b:fd:b2:d4:a5:0b:c7:9f:a7:ab:b2:
60:fa:83:c4:e2:67:f0:43:77:a9:48:29:51:1c:77:bd:f0:1c:
2a:4d:9e:16:1e:3c:72:5c:2c:b0:22:07:9d:08:22:86:d7:e2:
23:67:58:92:db:65:a6:9f:04:31:5b:62:77:35:89:dc:a3:2e:
5c:a4:3f:2e:fe:ab:28:af:14:92:93:63:c9:9c:33:74:3e:94:
6b:43:65:0c:78:f9:0f:a6:e5:e7:b5:9c:e4:db:b6:25:ba:66:
8d:c6:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:23:42 2025 by rpki-client