Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b08fa3f8-5dd9-33c6-9366-0c790606c39e.roa
File: b08fa3f8-5dd9-33c6-9366-0c790606c39e.roa (raw, json)
Hash identifier: dCFoAX7xdMh8FMnVg5Mwd96T2woWdfz47zKOGstl0Fk=
Subject key identifier: 83:CD:A5:35:B1:D2:44:5D:C4:42:DA:0B:B9:92:B9:F3:0E:AD:DC:78
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0204C3BACCFB755C3A0A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b08fa3f8-5dd9-33c6-9366-0c790606c39e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:02:04:c3:ba:cc:fb:75:5c:3a:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c9bbf358-b99b-4654-b04e-da2aecddf87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:52:be:ab:0e:f1:a0:05:70:cb:e7:b2:b4:
02:ff:66:ad:81:4d:4f:78:34:b9:a1:57:ec:fd:82:
d7:76:a9:3c:53:68:a2:18:c0:de:ab:c3:ae:4a:a5:
0c:b6:72:c7:07:11:f2:3f:85:7b:36:c4:ae:6d:2c:
7d:83:d6:e9:dc:0f:1e:82:31:b4:94:2f:4f:62:2e:
87:59:e3:54:3c:19:cb:0f:cc:c7:a3:a7:15:a9:50:
79:e9:b8:4c:45:d5:8e:f8:7b:2a:f5:24:cf:fe:bc:
1d:e4:27:74:6c:30:00:0f:ff:39:a4:f1:05:c9:15:
92:c0:de:63:0b:1a:25:ed:c1:0f:32:cb:fc:65:70:
c6:70:33:3e:ce:aa:59:d1:74:f0:bd:30:3a:e9:57:
b5:19:27:1f:d4:26:1d:ca:d6:32:0f:be:2e:32:5a:
80:82:88:0f:ae:ec:b2:1f:41:0a:69:4f:7b:00:fc:
da:9d:b8:fd:ab:85:4c:cf:69:df:e6:fe:38:12:0f:
26:1b:3d:38:52:95:f3:8e:6a:87:d1:42:70:c0:49:
40:0c:f4:73:fa:40:25:9f:c8:ef:94:8c:4d:3b:1d:
4c:fc:44:a0:93:59:e2:87:d5:8b:4f:b6:5d:b2:e7:
12:f2:e8:85:d7:29:06:63:8a:71:8e:35:2e:6c:04:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:A5:35:B1:D2:44:5D:C4:42:DA:0B:B9:92:B9:F3:0E:AD:DC:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b08fa3f8-5dd9-33c6-9366-0c790606c39e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:e7:3a:af:a0:ae:cd:bc:3a:5e:41:fb:93:f5:6e:97:70:2a:
b9:4f:1e:8f:0e:68:00:93:48:4d:e8:70:68:1a:2c:ca:46:72:
cf:f9:7c:56:a5:2a:a9:bc:ca:25:68:82:74:05:d1:16:31:19:
e8:ce:b4:0d:be:3d:21:29:35:5e:39:78:27:da:cb:ec:c7:8b:
e9:0c:80:71:10:67:39:13:c2:94:ec:d1:a1:c3:e2:7f:e5:81:
cf:02:3d:18:6d:df:04:e3:e6:c6:26:32:0f:9c:0b:80:99:b4:
3e:87:f0:8f:ec:e6:ad:31:7e:b2:b9:f9:c7:f1:5c:e9:3f:3d:
4a:73:97:90:eb:66:1e:08:2d:e1:f7:b5:bd:4f:0e:e3:b6:33:
1f:29:e2:a3:aa:86:b6:67:9b:aa:bd:b5:dc:72:3e:5c:6f:e8:
16:9a:d2:a4:38:78:83:1b:48:2c:e0:c4:9f:96:45:29:10:86:
54:f4:0e:83:3b:34:ae:eb:86:2d:4d:ee:6f:7f:43:6c:15:01:
9d:15:9b:92:07:1f:b6:0d:14:d4:7b:9d:cb:85:33:12:a7:66:
c9:56:12:e0:30:a2:a7:9a:7c:54:83:29:02:68:ea:b6:fa:21:
45:17:a8:7f:5c:b7:dd:c8:b8:61:3b:51:a0:2a:54:ee:94:b7:
a0:9c:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:49:53 2025 by rpki-client