Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9ffffcc-aaf2-3e55-839c-efb00de8c0ef.roa
File: a9ffffcc-aaf2-3e55-839c-efb00de8c0ef.roa (raw, json)
Hash identifier: WvaUgrQlGF5+9PsSEnsy63xFWki8+BabtYSBcN3Q8N0=
Subject key identifier: AD:D3:15:6D:DA:87:96:5C:77:FF:4D:0B:8E:BA:08:FD:8C:EE:B3:B8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0BEE1F1CD8A58B2057B940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9ffffcc-aaf2-3e55-839c-efb00de8c0ef.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.129.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:ee:1f:1c:d8:a5:8b:20:57:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0eb2242e-ab36-4ff6-bd20-d5dffd9833e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:b6:38:06:b1:cc:bc:f0:30:d4:2d:43:7f:
93:55:c0:b6:4f:5c:ca:d9:0d:af:b6:a4:2d:08:37:
02:cb:ff:00:cd:1a:31:8d:9e:22:f1:51:da:df:9d:
6e:e2:13:1a:89:36:fb:3c:4c:c7:4b:51:1e:e8:d9:
ed:0f:2c:c8:7f:66:98:02:5b:2c:7a:cc:05:f3:ff:
51:ac:4a:e5:6a:d2:54:1d:8c:10:b3:ce:81:e4:60:
08:0e:43:41:5a:e9:0d:13:bf:eb:78:e4:bf:2a:ca:
15:07:f0:53:ce:55:de:eb:25:57:58:2d:34:51:5e:
0a:01:30:5b:e2:dd:cc:32:aa:70:c5:d8:d6:38:b7:
dc:36:3f:6d:3b:c6:e0:fd:83:c4:63:3a:ad:da:15:
ad:61:9d:f8:68:a1:93:66:a7:f7:0a:66:bc:0d:7e:
23:a2:b2:bb:5c:8f:c0:97:00:51:32:60:66:33:f4:
11:d8:06:a8:85:8d:50:55:3f:c2:21:51:43:49:12:
40:89:26:1c:67:d3:e2:23:79:26:40:86:ac:07:70:
79:e5:8d:f3:79:b2:ae:ca:0b:e4:28:46:5f:90:cc:
0b:44:c0:17:cb:06:d9:45:8d:33:ca:79:17:6f:1f:
2d:6d:1a:e5:ae:55:56:48:c6:74:a9:b8:65:b4:0e:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:15:6D:DA:87:96:5C:77:FF:4D:0B:8E:BA:08:FD:8C:EE:B3:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9ffffcc-aaf2-3e55-839c-efb00de8c0ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d3:91:1a:01:69:45:ff:8d:b5:20:10:26:20:36:6d:ae:9a:
29:b4:d3:ee:33:66:8b:dd:62:d2:9d:73:d6:58:66:58:e5:6a:
f3:4d:54:52:7e:85:d9:e8:3d:3a:fc:cf:c1:30:a5:77:5c:bc:
e0:c1:5a:34:83:4f:ff:a5:f0:5b:c2:a7:c8:66:1b:91:52:bb:
17:dc:8a:a1:b3:9d:d5:cc:2d:db:7b:c4:a2:4c:ba:bc:fd:cd:
4b:2c:07:79:08:a5:de:5d:30:75:a3:26:f7:10:11:4c:b4:99:
d9:d3:94:be:e4:17:fe:3f:88:14:45:a4:7a:1b:da:04:41:82:
c5:86:0f:73:2d:6c:a9:72:f6:69:2b:b5:27:3c:96:61:f2:28:
78:00:bd:09:e8:bc:86:d7:9c:ed:b4:fc:38:93:1f:59:8c:09:
d6:3a:e1:fe:f9:a8:7d:37:15:41:30:ef:ae:04:a9:0f:56:4f:
de:86:a8:19:7b:54:a5:3f:7f:08:21:07:a7:78:6c:34:84:dd:
cc:70:31:b4:89:36:6a:cc:98:6a:b1:10:24:04:4f:ba:ac:9b:
8a:83:e4:4f:17:98:16:52:ad:90:15:70:b5:d4:8b:57:03:a6:
30:06:e3:28:ca:f4:73:5a:86:00:42:d5:60:93:15:db:de:19:
a0:59:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:19:19 2025 by rpki-client