Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1ddb771-0f7d-311f-9bc7-8db91707debb.roa
File: b1ddb771-0f7d-311f-9bc7-8db91707debb.roa (raw, json)
Hash identifier: PLlMTaIXuDcoYBbhfOtGRk2I5PgO36buOXhqrq+brjw=
Subject key identifier: 04:53:8C:FB:F8:AF:F1:5C:91:F9:15:A4:F3:18:CF:9F:41:A9:1E:C5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A16C25F1833B754C7D0C680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1ddb771-0f7d-311f-9bc7-8db91707debb.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:c2:5f:18:33:b7:54:c7:d0:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=afd913d6-d4df-4247-b7a3-b2283b0fbd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d5:33:0e:90:df:b7:54:cd:1a:55:25:2f:69:
2f:0e:1d:96:c6:de:85:42:af:66:24:ee:10:b7:92:
62:99:76:3d:63:7e:ff:dd:e8:3a:aa:15:0d:e0:2f:
84:68:65:1f:21:95:b8:72:06:eb:e6:f8:31:b5:3d:
01:4a:93:b1:b4:3d:74:c9:c2:25:af:3b:b6:59:03:
e6:a3:e8:1a:16:b1:02:c0:77:1b:55:4b:13:45:b2:
b2:4b:fa:cc:fb:7c:df:b9:39:72:17:0d:16:96:e4:
c9:a6:a9:1c:97:2f:e5:5c:e7:9e:59:32:18:54:22:
fe:8b:21:13:7e:40:0c:c1:c3:73:ee:db:45:c3:d0:
d2:1e:1e:4f:b7:2e:91:66:42:b9:c3:da:0b:70:40:
b1:22:e3:34:69:0d:36:7e:03:2f:e9:b0:59:2b:2e:
93:1f:81:b3:40:ca:b8:9c:06:77:3b:2a:17:cb:3d:
2d:10:7c:09:ff:43:cd:c3:e2:70:de:f3:b7:e6:16:
41:5d:7b:19:d4:f8:71:30:25:e0:b1:fd:ce:d9:35:
50:c3:50:fc:03:ed:e5:46:e5:97:f5:e6:55:f3:8b:
8a:79:3a:0a:af:af:7e:c2:a6:e1:57:57:c5:e9:64:
67:4c:35:00:6c:8d:6a:88:ac:74:b6:2f:a9:98:60:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:53:8C:FB:F8:AF:F1:5C:91:F9:15:A4:F3:18:CF:9F:41:A9:1E:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1ddb771-0f7d-311f-9bc7-8db91707debb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:b1:f1:23:a4:33:8b:bc:e6:ac:4a:2e:77:52:4c:e7:e9:5b:
fb:29:9f:13:ca:78:9a:b6:a2:35:2c:71:e3:5a:e6:f2:61:33:
4a:bd:92:f9:20:c3:90:55:42:fc:27:f2:c7:0e:86:06:62:27:
84:52:cc:79:83:6c:c9:6d:7d:43:36:be:2c:35:8f:d1:62:f5:
31:50:a1:25:5f:2b:a1:76:83:7d:3e:40:96:a7:47:1d:7c:90:
69:6d:81:d1:0a:43:60:2d:35:cc:33:57:02:82:8d:62:44:e8:
3c:2d:18:f9:e1:4a:ed:05:60:14:64:79:20:ca:7c:44:d8:7b:
8a:64:30:1e:78:67:0e:f1:8b:92:29:4a:16:ba:65:66:0d:85:
fa:32:e6:fc:78:65:f6:3f:8e:5a:09:1a:0f:c8:67:66:0c:9d:
61:41:b6:25:97:72:76:21:0b:aa:19:ac:d3:de:08:18:d6:07:
bd:f2:1a:31:ff:aa:4d:43:ce:af:96:6c:cf:25:ea:32:97:3b:
35:71:5a:b8:6d:b2:1c:58:11:b6:4c:c7:83:e8:92:58:dc:6e:
8c:bf:55:69:c1:b0:14:a8:12:8e:92:ac:d1:11:8b:62:ba:41:
e2:f4:30:9e:ea:f3:74:cc:ac:63:b9:6a:db:36:2e:60:1c:73:
2f:ac:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:29:44 2025 by rpki-client