Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba3263aa-82cf-352f-8f6b-42c50a099574.roa
File: ba3263aa-82cf-352f-8f6b-42c50a099574.roa (raw, json)
Hash identifier: tga26ra9RL/YIiEvawDTUB9uLVfxqpTgDSZ6OcrJf98=
Subject key identifier: BB:12:68:45:F8:66:5B:14:AB:28:98:DC:91:40:77:02:1F:47:FC:AC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0E065677A076FD1660BE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba3263aa-82cf-352f-8f6b-42c50a099574.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.109.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0e:06:56:77:a0:76:fd:16:60:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=92df9a85-74d6-4ce0-8813-4c515919db4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:81:44:67:f5:ee:19:ce:3f:24:cf:f6:3a:
1e:8d:65:f5:89:71:71:26:49:88:23:d0:f0:3b:6a:
8a:0c:75:78:1e:3b:ca:17:f6:99:3c:65:54:d0:5a:
df:03:2e:f6:75:9b:6d:7b:f5:a2:81:85:04:c0:f1:
0a:07:65:33:8e:5a:dd:18:48:48:27:ac:c7:2f:3a:
81:ae:e4:e0:3a:fa:ff:41:5d:3c:ff:36:e5:cc:88:
a4:b1:7f:b7:36:18:65:31:a0:e5:74:1c:78:e3:1c:
e7:70:52:06:3c:dd:a8:05:3c:06:3f:1a:df:55:43:
ee:c6:0c:a9:ac:54:f8:85:9e:8b:98:85:83:4c:77:
fc:bf:de:94:e8:5f:3d:b3:6b:80:e5:83:8e:67:5c:
40:37:87:59:fe:8e:99:88:6c:20:37:2e:bd:ba:29:
6f:af:95:88:c3:f6:11:e5:34:7a:e4:80:7c:20:8c:
b1:61:f7:97:d4:87:ed:c6:8e:ce:e0:90:f4:3d:c8:
cb:19:0d:82:75:db:5c:1c:eb:7c:e7:75:bb:63:bf:
a2:b8:b9:59:b9:52:3e:2f:77:8f:09:b9:a1:99:f7:
36:6e:e6:c9:6c:4d:04:4b:12:5b:f0:c2:ce:5d:cd:
cf:bc:ba:58:0a:6b:8f:0c:93:87:a6:39:a6:6f:86:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:12:68:45:F8:66:5B:14:AB:28:98:DC:91:40:77:02:1F:47:FC:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba3263aa-82cf-352f-8f6b-42c50a099574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.109.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:5b:d5:f3:63:2e:02:55:41:42:3c:0f:02:e0:66:6e:fd:f1:
24:a6:98:af:77:94:59:d4:93:c4:f1:52:e0:ac:cc:c2:60:54:
3a:a9:94:30:2d:b8:18:19:64:ed:05:0a:2d:0e:d5:4a:34:b1:
92:63:73:2f:c0:a6:e6:68:08:40:87:b3:4c:9c:24:d5:ed:ad:
ed:37:88:33:f8:12:45:e5:f1:8c:73:f5:52:61:bd:a9:ef:8d:
9d:f6:3f:50:13:9b:5d:af:ac:11:d3:38:c6:8d:51:74:ce:52:
9b:22:29:67:9f:08:43:7f:8b:24:d1:90:ed:57:bc:97:08:26:
54:1a:c5:8d:85:0c:11:3b:56:6f:75:4f:dc:a3:4a:aa:a3:c9:
a3:e2:30:f4:36:3e:82:fe:c4:d6:8c:f2:5c:4b:70:d2:6a:d8:
f9:1b:46:6d:50:9e:02:0e:12:e6:fa:0f:01:72:93:dc:c4:e1:
87:62:eb:d1:b0:c8:9f:bb:67:2b:a8:9a:0f:e2:e8:74:22:db:
42:f2:48:ad:6e:5f:e0:63:5e:80:61:ac:f5:a9:8c:19:8a:f4:
0a:e4:6e:9c:95:d0:49:10:62:c2:2c:7b:bd:68:a7:ba:22:12:
08:c2:f3:33:b9:93:92:f4:0d:24:e4:f2:7e:ea:8b:af:bd:53:
15:aa:06:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:34:19 2025 by rpki-client