Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afaec1ef-234e-3515-91b5-b7bb70b8820e.roa
File: afaec1ef-234e-3515-91b5-b7bb70b8820e.roa (raw, json)
Hash identifier: RRMzfzxRY2xGl0SajO2D7EYNzAGmWScD6dJf8opTW3s=
Subject key identifier: 00:C3:5F:DE:FC:77:69:60:D1:B4:58:C6:A2:DE:0C:D6:7C:01:E2:99
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A23D0074FA6A624B7691B20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afaec1ef-234e-3515-91b5-b7bb70b8820e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.130.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:23:d0:07:4f:a6:a6:24:b7:69:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3a093c0a-6fc8-4af0-8abd-071287929fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:65:10:d0:68:31:3e:aa:13:4d:73:72:fa:
9b:ed:49:5e:43:e2:a9:be:87:67:85:de:d0:cb:e5:
1c:27:2c:eb:74:4f:f0:6d:d9:18:1a:20:ba:e9:bb:
9a:12:8d:4a:22:93:bb:54:e7:e5:57:a8:a1:9d:60:
91:4e:7a:70:4e:4e:c6:a4:95:a2:a5:09:a2:9a:b3:
ef:28:ed:61:40:2d:30:6f:eb:d8:1d:e4:67:14:8d:
d9:83:91:7f:18:55:68:e5:3e:ce:81:d9:68:fd:33:
00:39:fe:f2:df:41:3a:30:f7:cd:dc:a6:ec:5e:1b:
5e:08:3b:b8:a2:e5:78:28:5c:fa:2c:00:b5:0e:2a:
df:c6:26:37:3a:3f:b7:36:35:4f:fe:36:c0:99:42:
85:38:15:79:f0:45:61:12:80:8d:ee:69:91:7b:5d:
26:23:d3:b3:40:4c:39:b6:95:4b:57:b3:a9:c3:d7:
17:5d:6b:c5:c5:cc:48:ad:37:58:e2:7b:14:f7:a4:
29:d0:d3:b3:ef:55:89:bc:bb:b8:5d:92:30:73:f9:
ba:68:1f:be:40:94:7b:1a:8b:b8:22:54:0e:18:3f:
03:d7:ee:cc:b5:21:b5:a0:ed:d8:ad:5c:f4:f5:74:
8f:0d:7d:b9:10:34:2f:c5:e0:26:0d:d6:5f:7e:2f:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C3:5F:DE:FC:77:69:60:D1:B4:58:C6:A2:DE:0C:D6:7C:01:E2:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afaec1ef-234e-3515-91b5-b7bb70b8820e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.130.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:46:2a:53:a6:53:f0:d7:b7:db:bc:77:f3:aa:f1:cf:f4:ee:
05:35:64:3f:b1:c8:99:f7:f3:95:39:0b:b7:e1:11:27:03:5d:
10:52:0e:80:79:b1:45:d4:2c:6a:4e:f1:8f:70:a5:20:ef:a3:
0e:8d:01:be:d1:53:39:a5:20:05:bd:36:8c:7f:db:75:ca:e7:
1b:70:71:a9:0f:1e:05:81:9c:8e:ca:60:4e:b6:96:cf:4a:36:
c6:01:6d:b5:c8:cc:cd:6d:58:ca:0a:ab:06:4e:30:92:4f:50:
ba:4c:0f:a9:88:a9:56:c6:ca:a6:29:7a:29:c1:33:cb:a0:2c:
8a:d4:84:95:4a:2f:90:47:1f:45:71:0c:1e:29:9a:65:1c:cc:
e4:df:57:f2:ba:04:c4:f4:b6:4a:49:7f:b4:56:5c:de:e4:85:
e3:f8:eb:9b:b8:3d:45:dc:f3:12:63:af:09:fb:a4:a9:c5:c4:
e6:6d:6f:76:ec:41:a0:3b:8f:96:8e:04:55:b6:e6:00:b5:f9:
1d:33:0b:e0:3a:2c:b9:85:cb:24:cf:fa:1a:fa:79:54:1c:4e:
8d:1a:6d:a8:35:39:99:a4:1b:ff:80:c8:9a:ce:84:dc:21:13:
3c:ab:3b:f6:35:2a:a9:e9:19:18:6b:95:56:a2:e1:4f:fe:fb:
29:66:a7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:45:30 2025 by rpki-client