Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aaaef8d7-bee4-30a5-a1e2-207425eff2b1.roa
File: aaaef8d7-bee4-30a5-a1e2-207425eff2b1.roa (raw, json)
Hash identifier: FNtLWELNMHB3KdkALi0zmD2jFD+0GCRR/2vm+TXTQXc=
Subject key identifier: 0C:F9:B3:D4:29:D0:16:05:6C:3E:97:DA:63:F7:FD:08:25:0C:A2:20
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0EE2344B43CE4FC5ACD160
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aaaef8d7-bee4-30a5-a1e2-207425eff2b1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.101.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0e:e2:34:4b:43:ce:4f:c5:ac:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a99d94df-af78-4c1d-b0d9-f9bfe1bf3034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:9b:26:d3:94:69:dd:4d:4e:1d:86:fa:7f:
c9:8c:84:60:b7:a2:0e:0a:ad:a9:da:e5:70:d8:d9:
05:96:6a:a2:2a:70:9f:2b:b1:57:d0:a6:c3:8d:c0:
24:31:0f:ff:a5:12:8d:48:1a:05:dd:c0:45:9e:66:
ee:2e:a6:3d:ad:8a:8d:71:be:36:ea:21:92:45:b8:
8c:67:3a:13:2f:af:60:e0:9f:59:9f:31:66:c8:66:
1b:75:4d:90:84:51:c9:ad:0d:f1:12:2a:31:b5:55:
c9:1f:7f:7e:f8:91:f9:d8:94:2b:2d:33:7d:a3:ab:
a7:2e:e8:d3:77:96:a6:ac:1e:a4:75:1a:38:65:39:
14:a9:4e:76:63:6c:e8:4c:55:d1:4c:5d:27:2a:51:
af:45:b9:29:0d:f3:ed:74:07:77:2b:63:a4:da:29:
91:22:19:5e:c9:cd:d0:3c:10:37:70:35:62:08:3b:
bc:6e:68:0e:c7:42:69:45:76:b6:a5:c1:0b:55:44:
97:c6:83:49:82:17:3f:a5:01:a3:e1:48:86:3c:97:
bf:85:0d:c4:8d:64:86:55:8c:1c:0c:86:3f:93:e0:
91:69:f4:b4:e7:d7:36:6c:fd:cf:7c:0f:54:12:a9:
a0:ff:d7:3b:59:11:ba:1e:4e:16:38:54:32:0b:6c:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:B3:D4:29:D0:16:05:6C:3E:97:DA:63:F7:FD:08:25:0C:A2:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aaaef8d7-bee4-30a5-a1e2-207425eff2b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.101.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:35:ad:c1:52:40:e2:d6:1a:5f:e3:3b:ea:d3:35:ed:ba:2f:
09:54:ec:80:27:bb:bd:9c:85:a0:cf:71:a3:65:a5:36:03:8c:
fa:4b:4e:fc:c3:10:2f:78:ea:e0:57:95:cc:09:4d:cd:96:f7:
2f:21:bb:d1:31:61:ca:4f:19:c2:e1:6d:be:59:56:d6:5f:ee:
fa:a2:70:26:4b:19:49:ac:18:7e:24:8d:c6:96:af:d7:97:55:
b1:06:6a:aa:62:fb:b8:c7:f1:58:0f:6b:15:03:7b:02:e7:4d:
6c:2d:3e:da:4f:b4:de:ac:43:06:7b:05:bd:28:59:01:0f:d9:
44:5b:0e:c7:7f:0f:1a:b1:6d:21:21:c4:a0:0a:d0:f9:62:4b:
0e:7d:19:3d:09:33:32:5c:5e:85:88:96:5d:21:c5:19:f3:b9:
22:7d:f6:9b:13:55:ec:fe:17:b4:c1:b3:ac:95:a3:5f:fb:01:
3a:95:23:3b:14:48:c6:d2:98:e1:ab:db:45:8b:01:28:5a:3b:
44:59:21:7b:34:6d:9a:37:3c:73:4a:66:6e:be:7e:8b:87:3f:
69:82:54:9e:3f:4a:96:03:75:15:9f:ec:e0:6e:e9:0e:c1:99:
3e:b2:5e:c2:c6:2e:e3:83:30:f0:b0:fa:bc:f4:60:1c:d4:0f:
ec:32:0c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:03:31 2025 by rpki-client