Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad991259-2ce2-3023-8655-2b780319d209.roa
File: ad991259-2ce2-3023-8655-2b780319d209.roa (raw, json)
Hash identifier: uGHfkWED6jGwIpHZf8adlLAigjaoc2gB1qo41YdCdFs=
Subject key identifier: E4:C4:EB:AF:35:82:9B:1F:92:A7:7F:74:69:66:B8:F2:B5:27:BF:A6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0FB3881BA6781ADB8C3A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad991259-2ce2-3023-8655-2b780319d209.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.124.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:b3:88:1b:a6:78:1a:db:8c:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=371d1e7d-c2ae-4c3f-8db4-5b0ea8433577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:53:c5:c4:72:c4:3c:2e:ed:dd:c6:81:39:
73:f4:c4:d2:b5:b2:f7:48:ee:45:9c:16:68:67:62:
ce:68:37:ee:b8:e9:1a:ac:79:5e:0c:2b:12:34:32:
0f:04:9f:ff:d9:51:7a:25:08:b8:7f:d6:6c:31:0a:
0f:e9:c5:20:5c:69:cd:45:9b:b6:96:d0:c6:4a:77:
5f:94:15:a2:92:a2:14:f3:ec:d6:42:47:43:0d:80:
bf:08:ca:9a:4e:0d:9b:a3:e0:2e:59:cf:8e:e9:e7:
46:bc:2e:6d:e7:0b:d3:e4:61:bb:81:02:3e:ce:a0:
80:0a:be:5d:27:3e:0d:d0:e6:de:8e:28:55:a1:27:
70:64:db:a8:df:5f:fd:f5:d2:27:14:de:16:5b:da:
c5:d6:a2:20:de:45:dc:55:ac:00:d5:e2:0c:ac:e0:
21:b7:f9:16:65:1e:03:52:8f:5f:73:d3:e9:d7:0f:
0a:aa:f0:32:48:dd:43:17:f9:25:fa:58:d6:d2:98:
3c:88:b3:bd:57:ab:5c:1b:c4:b6:0a:77:31:68:0f:
a3:3e:09:d7:90:48:4e:e6:9e:ee:d2:fc:c0:95:e8:
79:59:9c:5e:85:ed:a1:0b:5f:41:d2:93:87:46:dd:
76:a5:1d:41:ad:a8:6a:83:f8:ac:d2:65:d1:bb:44:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C4:EB:AF:35:82:9B:1F:92:A7:7F:74:69:66:B8:F2:B5:27:BF:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad991259-2ce2-3023-8655-2b780319d209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:1a:3e:44:00:f0:1d:89:5a:0f:3f:d9:18:f1:f2:64:da:1a:
69:aa:33:15:71:d0:a8:1f:34:7d:ea:80:82:7a:94:a1:11:41:
d2:6f:f8:b1:45:52:d4:78:eb:f9:0e:73:86:ad:b3:7b:f3:f4:
3b:13:1a:cd:33:d0:3d:4f:16:8e:c4:ed:9d:30:90:3b:c8:82:
ec:21:b5:fc:a9:3e:21:fb:8d:66:af:ef:76:87:21:63:fe:ce:
b7:60:00:d7:87:fc:2d:8b:54:84:4c:85:3f:ed:0a:39:0f:3a:
57:8a:4d:a4:f0:4c:8f:6d:9f:af:a0:7d:ca:91:51:50:3f:6e:
99:92:71:6a:e1:58:db:ad:06:65:6d:90:ce:f3:45:45:46:69:
3d:0c:ed:ce:f1:b5:51:b2:d7:7b:df:82:27:a9:6f:a3:2c:b2:
b2:09:06:c8:2b:c6:bd:a4:66:2e:c6:cc:74:bc:ed:e3:4b:79:
c3:24:e5:4d:f7:50:21:cc:93:04:80:97:cf:87:42:b8:a5:b4:
cb:fc:bd:aa:42:ac:5f:ad:3f:8a:8f:9c:8e:c0:3f:61:73:b9:
75:b6:78:b9:1f:93:ac:a1:2a:8a:d7:25:63:78:25:e8:94:08:
82:df:17:0d:89:05:0b:20:00:42:ec:3d:67:b7:38:5f:55:da:
ef:78:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:04:11 2025 by rpki-client