Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bccea66b-11dd-3a08-840a-b7b6227bc251.roa
File: bccea66b-11dd-3a08-840a-b7b6227bc251.roa (raw, json)
Hash identifier: Z88zBli8ElfnRCZwAieceeAg/8cxwu1dyQL5hJSEmRc=
Subject key identifier: 67:C0:7D:1A:22:98:68:0E:D9:BA:F0:96:2C:71:C3:EC:5F:69:35:24
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FAEB3B133E0DA4FE1842A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bccea66b-11dd-3a08-840a-b7b6227bc251.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.144.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fa:eb:3b:13:3e:0d:a4:fe:18:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e026a9d5-62f7-43b4-802d-2be237e33144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:98:15:a7:21:d2:f1:fb:d9:70:cc:d5:56:
2f:b2:46:c0:ca:bb:ad:6f:42:13:9e:93:2c:89:78:
b9:1b:65:35:ae:70:22:66:bd:4a:7a:6a:f2:78:03:
5b:20:17:f7:c8:6f:1e:32:84:de:df:27:11:d8:a7:
05:c6:a7:2d:6c:87:51:a3:5e:06:ec:06:a5:04:e8:
f2:06:66:25:d7:04:87:8d:e1:02:6b:48:c5:ef:2d:
6f:bb:26:60:34:d7:c1:2b:3f:53:d4:64:5b:6d:0c:
66:80:34:c4:3a:a8:1e:29:fa:ea:05:26:18:ab:53:
af:75:bd:6d:72:3e:8b:bd:27:0d:b8:2c:f6:85:c3:
3c:ff:e4:89:dc:57:59:b8:35:92:1c:7e:e8:e5:28:
fe:43:ac:a5:cf:d6:78:d7:7c:dd:65:19:a6:b9:8d:
1d:50:4c:23:81:ed:ab:87:3f:58:58:8e:4f:fe:1d:
46:f2:92:7e:3a:fe:46:77:27:b3:27:ce:6d:aa:00:
5e:fe:6a:95:38:fb:45:3e:69:bb:98:9f:09:ca:33:
46:d1:57:7f:c7:1c:76:cf:bb:e5:ba:d5:df:01:47:
5c:b6:92:d7:18:c6:31:1e:ae:1e:c8:c4:db:f3:5e:
6c:c4:58:aa:45:35:f5:69:f6:2b:f1:35:88:35:4e:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C0:7D:1A:22:98:68:0E:D9:BA:F0:96:2C:71:C3:EC:5F:69:35:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bccea66b-11dd-3a08-840a-b7b6227bc251.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.144.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:c6:cd:64:2c:a4:17:0f:eb:c3:50:65:f0:c9:c5:c0:18:b1:
99:63:40:cc:95:ec:e6:85:45:38:dd:4a:9c:96:ec:dd:64:e3:
b1:fd:02:96:5d:d8:53:10:52:12:ae:42:4e:3c:3c:a3:93:e7:
05:ec:19:ac:68:a9:58:cb:8d:ca:fb:a8:04:59:f1:dc:36:ad:
3f:44:9f:87:ff:7a:bf:ec:9c:ee:73:f8:a3:28:02:64:f1:8f:
4f:bd:52:77:32:d3:1c:3b:5a:06:b9:11:84:08:41:7a:b3:0f:
70:8c:d8:9e:ff:0c:e0:1b:5b:b4:f0:6e:b9:ae:2b:e3:8f:40:
78:b4:7b:98:58:7b:f4:89:48:a1:bd:14:de:6e:b3:98:77:14:
5c:32:fa:2d:4a:a2:0d:02:79:14:2c:51:68:53:ce:9b:c4:c3:
48:5c:c1:26:b2:c3:c4:ac:f4:3d:80:c5:6e:46:bf:9c:ff:02:
90:61:32:5c:f4:c9:62:1e:eb:58:76:46:d1:51:6a:37:5e:b9:
9e:c6:50:7f:df:66:21:e6:a8:e6:1f:3a:f8:d7:f4:ab:97:22:
03:b1:59:34:44:3c:c3:fb:9b:69:4c:9c:c4:d9:3c:19:32:f8:
45:e4:80:ed:21:ce:56:d6:44:04:05:14:90:5a:f0:4c:04:b7:
7d:fe:3c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:08:23 2025 by rpki-client