Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7220cb-6777-3c03-bbc5-99908e3d2da5.roa
File: aa7220cb-6777-3c03-bbc5-99908e3d2da5.roa (raw, json)
Hash identifier: BJh5X9NkzXgc/ggD/3xadvrtMnhkpvzNptstLx5yans=
Subject key identifier: D9:A0:D2:01:38:19:27:9A:4E:EC:9F:E2:E0:69:CC:7D:C7:62:1C:16
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A24734CF7C5353ED5F39700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7220cb-6777-3c03-bbc5-99908e3d2da5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.68.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:73:4c:f7:c5:35:3e:d5:f3:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5d528589-3172-4ce7-8886-431402f46588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:e1:2f:6f:c6:37:93:7f:e6:10:b2:c1:c4:
b6:76:3d:1f:44:dd:37:b2:4a:6a:e2:9e:d4:9a:63:
df:71:94:7e:3b:c5:42:ae:51:1c:5d:7c:f8:76:a4:
d6:8e:ba:61:71:8d:c8:c9:5d:cf:8a:64:e3:39:8e:
ab:8c:68:d6:f9:73:05:55:3f:e1:d3:11:c2:f6:15:
fe:9b:36:cc:08:70:1a:0a:80:1d:d0:45:90:e6:f5:
f1:67:1f:85:19:29:51:55:be:38:30:49:44:29:7f:
c0:19:6d:fc:21:7e:f6:be:9b:ae:74:08:98:8f:2a:
6c:2e:26:ad:87:49:4e:e6:85:0d:5e:b4:f7:76:d7:
05:4f:4a:f8:ea:7b:45:66:ca:fa:87:1e:7c:02:58:
bb:91:c6:05:ab:2b:3d:e1:3a:82:53:ca:bc:8c:cb:
57:34:e8:4f:7e:99:df:41:83:2f:c9:65:83:8a:e4:
f9:6e:66:43:71:e3:13:ed:e8:20:84:c4:c0:81:75:
01:01:45:94:52:64:1f:a3:e7:38:95:34:9f:ce:ca:
a5:4d:60:00:ba:9c:10:15:c9:ba:4c:5a:d4:c2:a2:
21:3d:47:85:5f:ce:60:d5:87:1d:23:cf:d1:da:6b:
3b:39:23:8b:84:c0:f8:07:37:27:39:df:20:c8:ad:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:D2:01:38:19:27:9A:4E:EC:9F:E2:E0:69:CC:7D:C7:62:1C:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7220cb-6777-3c03-bbc5-99908e3d2da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:2a:2c:2e:10:dd:f4:d5:85:b5:83:ab:4a:2c:87:fa:2a:b4:
aa:b3:da:54:f4:6e:0d:15:ad:03:8e:05:da:aa:f3:42:fd:a8:
2c:05:ae:db:4e:f9:63:28:51:63:67:c7:be:d8:78:12:18:df:
aa:2a:6f:e7:1f:6e:2f:f7:7e:4b:70:1d:e1:fe:24:06:5c:2a:
c9:d3:30:ca:f9:e6:a7:8c:67:b6:f7:84:47:87:8d:9d:6f:7f:
89:03:12:29:c7:9a:ce:27:43:a9:a5:f9:4e:90:18:11:d6:af:
2f:18:00:7a:51:80:3e:ef:0a:f7:e4:38:99:00:d1:3a:3c:ba:
70:14:1d:c1:da:b8:09:f5:8b:e7:51:84:b9:a6:26:d5:1b:d0:
aa:a5:dc:bf:30:4e:99:c9:62:07:43:8f:fe:bd:d0:2d:81:df:
a3:a6:a4:f7:e5:ad:5c:8f:b3:23:47:64:b1:8a:b4:fa:ef:e9:
79:7b:e7:9c:8b:0f:0b:a9:cf:08:71:aa:4b:3f:63:55:66:9f:
93:07:5d:c8:e1:d4:70:8e:ff:74:a7:1b:0b:74:29:63:c1:8c:
2e:75:f2:36:bb:cd:08:42:64:a0:20:bf:f2:72:ed:48:51:60:
a3:2b:73:e6:3b:e5:70:a2:76:4e:81:fe:0c:45:46:82:36:7b:
46:f1:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:12:15 2025 by rpki-client