Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a99a0aa1-2e94-31e8-98dd-491941b7f90b.roa
File: a99a0aa1-2e94-31e8-98dd-491941b7f90b.roa (raw, json)
Hash identifier: D0a5zNCrqEXXAwdbTEJrnXEW4AZr6p4AtYJf/TS0FrA=
Subject key identifier: F1:CD:58:39:AC:C7:F2:05:61:93:02:A0:BC:02:4E:23:71:D3:01:3A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F2E334E57430BE3A197100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a99a0aa1-2e94-31e8-98dd-491941b7f90b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f2:e3:34:e5:74:30:be:3a:19:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c7675f2e-fc55-4230-9401-4cfb426cb371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:b2:db:6f:30:8f:c1:81:3b:a1:7f:8f:a5:
2b:eb:24:f5:db:a7:cb:49:d6:eb:51:2d:6e:ba:47:
7e:ad:00:6c:37:db:38:2f:01:07:8c:4b:1e:35:e3:
4c:b9:5a:ba:d4:4a:ee:7b:cf:1d:e2:b0:a8:d6:de:
42:27:6c:96:fa:e8:11:3d:6a:92:e8:9d:0b:90:3c:
05:3b:97:22:59:db:eb:d3:39:9a:3b:41:1e:8e:31:
ab:27:1f:28:31:54:25:d0:27:3f:90:4d:03:d4:7a:
97:a4:4f:f0:50:23:12:cc:78:d2:52:4d:61:79:63:
7b:14:15:a3:c6:1d:a2:78:0b:00:16:7f:2b:9d:29:
43:12:96:66:54:fa:41:18:ad:a9:70:3e:fc:fa:ac:
2b:2a:bb:98:b6:ea:d2:9d:26:35:3c:09:4a:b8:52:
9a:3e:5a:fb:18:13:74:04:19:66:a1:be:b2:5e:ca:
5b:16:f3:d2:5a:26:85:fa:86:8a:a5:51:48:b8:d0:
46:3b:ef:35:19:d4:16:94:40:60:e6:ab:cf:97:46:
9d:04:79:d9:f2:62:77:f3:da:26:c8:d0:04:63:4e:
90:74:a6:cf:4d:92:2c:7c:dd:ae:11:25:3d:f1:e3:
da:6b:7d:3b:59:e0:80:80:24:17:00:b5:20:48:2b:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CD:58:39:AC:C7:F2:05:61:93:02:A0:BC:02:4E:23:71:D3:01:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a99a0aa1-2e94-31e8-98dd-491941b7f90b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:db:eb:32:8a:71:b2:8c:8c:38:bf:c6:5f:82:c0:a8:9c:db:
d8:bc:a9:61:df:ff:59:9c:1e:a6:3c:7a:5a:05:97:eb:b4:88:
18:72:50:16:8a:73:d3:12:5b:b7:af:be:4a:83:cb:bc:6c:7b:
7e:ea:0f:f7:3c:c8:95:74:b4:0b:56:51:71:27:43:0a:3d:de:
cb:e4:d7:14:37:07:2c:cb:f5:cd:e3:86:27:e5:f7:c2:64:95:
04:70:19:ed:a6:9a:e9:78:cf:a4:dd:0e:f8:4b:72:92:bf:52:
f7:fd:5d:c1:05:d2:ad:6b:9d:6e:fb:16:0b:0f:b6:c7:7c:0b:
19:14:a3:39:e7:5e:f2:b6:36:e5:a7:a6:a2:3b:88:cc:c0:71:
56:db:5e:56:91:37:65:2c:7a:6b:32:bf:e0:40:22:23:2a:f9:
60:7a:25:f0:2a:f9:f5:bf:d2:fb:12:a3:1d:e3:16:8f:9f:d9:
bc:1e:67:17:b4:71:6a:cc:4f:f8:c0:e5:f4:fd:aa:b3:86:21:
d9:2e:21:f4:1b:84:4d:b3:44:1c:97:39:b2:a8:57:c9:03:bd:
0a:d3:3d:68:1d:86:ea:da:6b:19:dc:4d:b4:d2:0b:0b:0d:11:
95:e7:8b:68:d3:bc:de:f3:68:f9:27:c0:c1:4c:ef:7b:81:da:
a4:95:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:46:46 2025 by rpki-client