Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbefbd08-6f09-355e-9a40-6e3325cd651d.roa
File: bbefbd08-6f09-355e-9a40-6e3325cd651d.roa (raw, json)
Hash identifier: q3GE3gLOkw11Ar3pav1pRVn4EMt+sKa5uKI1MVFsj7o=
Subject key identifier: 22:64:9B:3C:A9:9C:A8:FD:43:90:D4:81:E1:C2:81:A5:08:E7:B6:1C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A20EFDE3D0218985B8B9680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbefbd08-6f09-355e-9a40-6e3325cd651d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.100.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:ef:de:3d:02:18:98:5b:8b:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e23b1b0f-84ec-46b9-bd62-9e39e5e60109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:06:12:b8:39:4b:09:3a:2a:79:b8:56:18:
55:f1:11:c9:c3:91:39:46:a2:b9:df:1b:21:d4:76:
74:13:36:a6:0e:5e:e1:54:dd:8e:44:ed:22:05:f6:
61:f2:f7:71:25:b8:e7:c8:72:e1:ac:98:d5:68:02:
e5:b5:d4:f0:0c:f3:8a:d0:54:2c:de:1a:b5:85:ea:
00:a7:4c:ca:ed:b0:a8:68:eb:d0:40:c3:ef:6a:2b:
7b:6c:a6:25:7c:96:cc:0e:b6:e5:28:08:17:c9:49:
be:49:b0:a5:70:dd:7e:54:95:53:89:27:63:91:ad:
0e:23:26:ab:72:66:2d:1d:ef:f7:f9:1b:be:94:ef:
e9:f7:0c:a1:37:8c:42:67:6e:bc:a4:5b:eb:13:a4:
6f:b5:4e:e0:ce:a8:94:cd:ea:b7:e6:a1:4a:e0:fc:
81:01:54:ad:03:97:d7:60:89:f4:09:ab:08:1e:62:
34:55:ef:c3:08:14:6d:55:44:b3:8c:2b:66:e6:ba:
d4:c0:f5:f2:b2:24:74:57:d9:cb:7b:6f:fa:53:50:
d7:e8:15:5d:bb:09:99:de:3e:0b:6b:f0:ba:3f:89:
1e:d5:3b:c2:02:dd:9a:97:24:d9:b1:80:4b:d9:82:
34:f7:01:67:4c:87:a9:dd:85:5e:5c:38:1c:77:42:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:9B:3C:A9:9C:A8:FD:43:90:D4:81:E1:C2:81:A5:08:E7:B6:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbefbd08-6f09-355e-9a40-6e3325cd651d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:7a:c9:91:33:80:7e:70:e8:d5:02:56:f3:c3:92:2a:95:ed:
30:3c:b7:41:c4:d1:79:3d:12:14:30:b0:90:66:9f:a4:f8:42:
bd:e3:28:50:e1:c1:db:e6:fc:81:4e:7d:c6:ee:b1:5f:37:95:
0e:a9:65:dd:44:8e:5e:af:4e:21:6f:78:92:90:5f:f5:d4:2b:
12:f7:c5:78:16:c9:d3:68:6c:c7:5a:ed:6b:de:95:8c:df:06:
7a:38:bb:aa:f6:d3:5f:e0:a3:92:4d:20:61:42:a4:3f:8d:f2:
39:2e:b9:7d:6d:cd:30:84:d5:23:08:c3:88:4f:6d:e4:87:67:
d8:ec:8a:4f:32:93:25:10:80:6a:b4:f4:6a:71:22:ce:33:ea:
6e:8b:0d:cf:80:1a:c3:b5:54:52:48:1a:bf:2d:a7:84:f7:25:
c9:f9:0e:d5:8d:dc:f1:8d:d2:f4:85:c1:a3:bd:c9:d8:b9:23:
e2:da:e2:7e:e0:a4:32:bd:20:3a:01:bc:a7:3e:e5:d5:75:ee:
13:54:4a:db:1a:a8:5c:78:ec:15:ec:68:6c:d4:9d:c7:a5:d6:
ca:d9:1f:b6:f7:8a:39:e7:9e:f0:d4:f4:01:c6:c6:22:8f:d6:
5a:dd:76:19:c8:99:42:49:f8:71:d8:d6:f2:dc:96:92:cc:8c:
4f:9b:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:41:50 2025 by rpki-client