Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/accf8063-8fa7-3946-876d-96d3639a391c.roa
File: accf8063-8fa7-3946-876d-96d3639a391c.roa (raw, json)
Hash identifier: f+fFTefztiOnJUTx7vYFc5nDC9hOTp+ouCqjfA8YVCc=
Subject key identifier: DC:95:46:AC:FF:57:AD:FA:24:8C:4F:6D:BC:B0:C1:04:4F:87:E4:29
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5AE46F8EFB9D45C5B3C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/accf8063-8fa7-3946-876d-96d3639a391c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.109.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5a:e4:6f:8e:fb:9d:45:c5:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=c693d86c-4f35-4366-804f-c02755be65b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:4c:97:23:14:00:a4:a0:d2:db:a2:6b:a0:
93:1d:a5:c7:70:06:ff:96:40:21:2b:b2:f6:75:7f:
31:4c:38:38:2f:25:77:bd:7b:3f:0c:62:fd:b1:fc:
30:36:44:ed:d8:5c:b3:67:f1:92:9a:8d:e3:eb:a4:
7c:5a:b0:ec:dc:7e:b4:51:db:19:d7:ba:82:3c:6f:
d0:6d:c8:51:be:6d:73:e0:d7:61:a6:59:38:32:34:
76:ae:e7:bf:67:dc:77:e4:23:ee:06:cc:62:05:db:
a0:ff:05:71:ad:ec:f2:02:24:30:bc:a6:8f:45:ec:
cc:32:a1:f2:3c:c6:2f:ec:c4:b4:39:27:a4:fa:a5:
a3:0c:54:a0:30:ac:75:ac:46:09:00:58:33:0b:f6:
63:d9:59:b6:08:f5:de:01:5c:3f:b7:ad:d4:2b:44:
6a:d1:38:5e:1b:9f:e3:40:11:69:0b:44:ea:78:4c:
9f:23:ab:c7:06:95:42:e6:12:60:6a:fd:f5:26:7a:
86:8a:77:ab:2d:d1:93:c1:7c:48:df:92:0e:86:eb:
0a:08:ab:b9:50:45:a9:ae:76:9b:49:67:2d:cd:82:
de:14:84:93:39:7c:7c:5e:cb:ba:53:09:47:66:fb:
69:e9:92:af:49:8b:b8:b7:7a:dd:ea:39:d5:27:b8:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:46:AC:FF:57:AD:FA:24:8C:4F:6D:BC:B0:C1:04:4F:87:E4:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/accf8063-8fa7-3946-876d-96d3639a391c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.109.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:45:7f:8b:71:bf:e1:db:22:d4:bb:b2:f0:f4:34:72:ed:98:
98:41:5d:56:d5:35:eb:f4:68:83:7a:ec:ef:92:db:93:28:16:
b1:6f:04:5b:14:f4:01:5a:04:8d:f4:40:4e:40:e6:40:4a:bd:
bc:96:04:22:ad:17:bd:55:8d:5e:cd:92:e4:70:76:fe:0a:3a:
6a:33:91:d5:e1:bc:67:f8:ab:5b:77:fb:ac:c7:eb:14:f2:ad:
0a:f9:e7:e6:f9:be:99:54:f7:6e:cb:35:b4:4e:ba:5f:5c:25:
af:fa:cb:38:22:f0:d1:ed:4b:3c:5a:f8:28:22:a0:eb:3a:a0:
44:a7:78:25:4b:2c:b1:10:43:66:67:91:4d:4a:9a:fa:e6:40:
09:66:dc:f5:c7:43:bb:ae:a1:a1:97:14:01:fb:c5:c2:5c:48:
8d:c7:ba:9e:d5:fb:d6:d4:1b:67:85:6b:4a:de:71:e9:20:e7:
d6:39:6b:2a:e3:cf:e7:3e:4c:e3:e6:a7:e8:db:6b:1f:8b:f7:
55:c1:1c:12:aa:85:34:77:41:d3:0e:d5:20:16:09:39:6a:30:
69:9e:65:b6:2f:e0:bb:9d:04:10:2f:68:49:dd:cb:f1:03:64:
1c:ad:9f:30:cb:ab:f5:92:db:2a:88:f3:44:02:24:ba:71:83:
86:7d:f9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:35:30 2025 by rpki-client