Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba214a31-d451-386c-9eaf-3e126e92dc4d.roa
File: ba214a31-d451-386c-9eaf-3e126e92dc4d.roa (raw, json)
Hash identifier: D+LaAE9nVwGE8HzWTH0eST162D9sYzFVbUHKfLNAGLQ=
Subject key identifier: 9B:4A:3C:9B:EF:41:08:3C:E4:CF:A1:75:5B:B1:E1:38:D9:FC:BB:B4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F476F865D46A745A87C980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba214a31-d451-386c-9eaf-3e126e92dc4d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.64.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:76:f8:65:d4:6a:74:5a:87:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d7218cbf-7681-4148-8dd4-adac02fb0be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:26:e5:f5:fe:40:da:f3:5e:c9:a9:bc:94:
90:03:8e:de:13:1d:9c:50:9c:e5:1f:cf:14:35:cb:
4c:d8:08:35:35:95:cb:b1:5d:34:30:51:05:73:b2:
cf:ec:65:5b:5a:45:9d:ad:14:57:53:d5:7d:0c:3b:
51:db:8e:60:a9:db:10:ef:b8:5c:a0:d8:3b:1b:ae:
b3:fb:67:76:ad:a9:39:0e:3f:99:52:82:ea:d1:89:
95:fc:52:96:d7:45:e4:aa:ee:5f:f7:77:73:af:aa:
1e:41:f2:3e:80:6e:72:81:53:26:ef:d1:ce:4e:6a:
1f:70:65:6f:f6:63:23:e5:97:fc:c4:c7:30:5a:05:
32:9f:75:7c:95:e7:34:b8:fe:1c:94:bb:59:34:17:
e3:66:6f:48:5a:7d:5e:fe:be:ab:75:cd:01:8c:80:
d3:dc:f4:26:3f:59:3f:98:57:6a:99:0d:69:15:94:
d0:a9:be:c0:21:7a:60:fd:c2:c0:00:90:a4:66:48:
a0:90:16:a0:ed:de:b3:eb:85:ca:f8:c0:1f:0d:d2:
5c:64:f2:54:99:59:c1:c1:70:2c:2e:20:bd:70:c7:
65:e2:23:35:77:65:9f:8d:c4:ac:ee:20:18:45:5c:
60:d4:5d:48:73:49:90:9a:2e:84:e0:a1:e6:57:2e:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:3C:9B:EF:41:08:3C:E4:CF:A1:75:5B:B1:E1:38:D9:FC:BB:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba214a31-d451-386c-9eaf-3e126e92dc4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.64.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:1e:02:fc:db:3e:d8:10:44:c7:1e:cd:7e:63:8b:e6:19:b8:
b5:e8:67:0c:72:3c:e5:7d:65:88:a3:47:eb:96:c6:dd:cc:32:
49:b9:20:ee:9a:34:7d:93:25:29:88:11:9c:22:ba:c3:15:5b:
76:0c:a4:4a:d8:54:7f:a0:67:dc:81:3c:e3:15:8e:5f:b4:9f:
db:91:84:64:01:5d:65:ce:ab:24:e5:87:fb:ee:56:a1:f9:cc:
46:0d:59:d9:90:79:2e:f8:76:53:2b:12:94:10:66:e6:b8:c6:
55:4d:85:f5:ce:99:3d:e4:33:40:17:f5:bd:c4:11:2e:83:21:
dd:32:57:70:18:76:ff:b1:98:03:96:7e:87:cf:62:69:30:76:
24:34:8e:ba:73:12:5c:cc:e5:ed:fe:3f:34:9a:77:04:53:e9:
7e:bd:db:2e:8d:d1:d1:a9:22:cd:8e:f5:35:18:7f:1e:dd:8c:
17:aa:81:41:5c:3d:3d:51:4d:cf:72:4f:70:a8:0d:6a:94:c6:
e7:21:c8:43:ca:11:93:d1:0d:3a:72:10:dd:9d:63:64:b6:ea:
49:86:e4:a8:4e:e5:4f:8b:97:3a:4d:5a:b5:e5:5a:05:ac:88:
37:a8:53:31:f4:74:de:13:1f:1f:ac:cf:a5:d8:63:3f:60:a2:
09:92:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:59:00 2025 by rpki-client