Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd43827b-d1e1-3687-9430-327d82e775e7.roa
File: bd43827b-d1e1-3687-9430-327d82e775e7.roa (raw, json)
Hash identifier: 5XDYy41tYMHzyc651f3pqwDNptfZDkrYMvSS6K/lKsY=
Subject key identifier: BC:AD:F5:61:CD:46:6F:F3:1A:CD:F6:0D:9F:FC:B4:17:DA:97:BB:BA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F175BE58F6619227124EA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd43827b-d1e1-3687-9430-327d82e775e7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.127.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f1:75:be:58:f6:61:92:27:12:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7d65ce63-764d-4cb0-9958-8cf29d649bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:dc:39:5c:50:23:d6:cf:dd:6e:dd:a3:c3:
0c:df:70:cb:23:3f:f1:f4:76:f6:25:d0:36:a3:ba:
b6:43:73:e2:74:e1:16:6c:8c:de:6a:a3:a3:48:a1:
ea:3b:b5:5e:7b:42:60:13:24:ad:da:fd:6a:c4:df:
d0:eb:dd:70:8f:8c:66:0c:cb:ae:92:dd:e8:b6:bd:
41:6d:1a:e5:4f:ee:6d:af:17:07:37:e6:3b:c0:14:
88:0c:a8:84:af:52:d6:3f:85:e5:fa:95:dd:b9:d4:
54:c3:f7:6e:83:17:3b:fa:ff:00:28:5e:55:83:37:
6a:b1:1e:43:e5:9f:9c:69:d6:79:af:17:d7:f0:99:
94:66:72:6a:03:51:3b:42:35:c8:15:e0:15:63:72:
91:7f:07:23:34:01:07:ae:bb:63:0d:32:f4:ad:3b:
4f:94:82:fc:29:6b:9c:6e:a9:ab:07:33:6c:fc:d7:
d2:07:d6:e2:94:53:77:71:eb:fe:0d:e9:d3:b9:14:
91:a9:dd:39:2c:ed:ac:2d:84:92:76:76:1f:0b:5d:
3a:bb:a7:83:da:2d:bf:50:41:0e:a9:6e:d0:28:e7:
d9:52:03:97:44:16:b1:01:17:ef:69:c2:86:b7:05:
77:b3:29:de:aa:a4:8b:29:c9:ea:18:19:95:c6:3a:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AD:F5:61:CD:46:6F:F3:1A:CD:F6:0D:9F:FC:B4:17:DA:97:BB:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd43827b-d1e1-3687-9430-327d82e775e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.127.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:3f:9d:9d:e4:47:9f:67:17:23:90:18:4a:94:6a:2b:97:2a:
87:af:38:c9:26:7d:f3:14:98:73:72:61:ae:61:99:eb:2e:8e:
3d:5b:6f:7e:7e:40:9b:a3:51:58:7f:b8:02:21:2d:52:06:4e:
7b:24:06:fe:39:9f:90:ce:0f:f5:cf:61:a6:74:12:79:3b:73:
84:12:fd:cf:55:cb:11:06:35:7f:14:c0:96:92:d4:1c:98:66:
03:ce:d7:8a:86:ac:6b:9c:4d:e2:22:65:6f:72:e2:05:8f:0e:
61:2f:8b:5f:d3:93:69:46:a2:f6:9a:07:a2:8f:72:ae:39:dc:
b7:40:f7:88:c1:ff:68:a2:d2:38:66:7c:4c:95:bb:ca:b9:1d:
b0:ea:b5:9a:41:0c:27:cf:c6:89:b8:79:c3:e2:53:ed:89:2e:
80:7c:94:8a:b9:d4:ed:5a:46:eb:eb:26:d7:66:9b:85:d7:b6:
f8:c4:a8:ba:a3:7e:6e:06:74:11:83:10:ca:c4:ad:ff:0a:9f:
95:a3:bd:29:56:f0:94:90:77:3a:70:44:bd:c7:47:9b:50:b1:
5b:9b:13:4d:3c:d8:0f:74:45:28:85:2a:01:c1:92:b5:1c:a8:
24:c0:69:50:07:a0:48:e1:2c:4e:05:60:63:c1:9f:be:d4:5c:
d9:65:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:50:13 2025 by rpki-client