Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd99dc31-685c-3d46-814c-492119709b23.roa
File: bd99dc31-685c-3d46-814c-492119709b23.roa (raw, json)
Hash identifier: 8GsI9FMWk2+giVUPnZQeuIrdekAiYm1MzWrgh7myJnw=
Subject key identifier: 15:CD:E9:44:78:F4:3F:C3:4D:17:AF:54:72:CB:6A:56:4F:F1:64:C9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A24975814EC0627C132FA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd99dc31-685c-3d46-814c-492119709b23.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.133.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:97:58:14:ec:06:27:c1:32:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3b00708f-e688-4aa5-8ffc-e3469d1a761d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:88:1c:2b:06:e1:dc:8c:d0:b5:c5:64:44:
81:4c:30:29:16:be:73:0d:31:d9:64:6c:23:9d:e6:
27:67:a8:75:6b:5a:ad:6d:30:d8:8b:cf:66:c7:37:
a2:58:7b:a7:5c:f5:38:af:4c:3c:1b:c5:cc:06:a6:
90:1c:7d:bb:6b:cb:3d:1f:fa:ea:c5:ae:2f:c4:4f:
af:be:57:ca:f7:c7:4e:8c:a4:10:ea:41:f8:1e:ee:
5e:92:0e:88:3c:b9:41:42:19:aa:70:d4:d9:24:fb:
18:db:eb:d7:49:a1:3b:6d:1f:48:da:87:a4:b5:7c:
68:b8:45:9e:e4:d8:47:56:50:5e:95:b7:a6:84:4f:
7f:68:c3:ce:26:fe:0d:7b:99:7d:db:25:4a:73:ea:
ce:b9:3f:61:78:06:f8:ab:e8:09:51:03:1a:ee:67:
eb:6d:bc:9f:33:ff:07:55:03:41:43:15:c4:3e:74:
29:04:01:e1:dd:9b:89:24:78:05:dd:1f:91:67:31:
b5:57:0e:85:af:db:4c:d8:30:2f:c2:56:9b:67:f8:
02:5b:df:16:18:d9:63:78:14:69:2a:f0:12:fa:38:
02:a7:49:ea:40:de:25:2d:e6:23:43:f8:fd:88:1b:
10:fd:3d:7e:4b:26:e8:7e:9f:ca:45:5d:e9:ae:5d:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CD:E9:44:78:F4:3F:C3:4D:17:AF:54:72:CB:6A:56:4F:F1:64:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd99dc31-685c-3d46-814c-492119709b23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.133.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:81:23:0b:77:6f:11:25:33:1e:bf:19:58:3b:b6:fd:d4:4e:
de:46:9c:b3:b3:ea:fe:49:a7:95:1d:29:07:25:1e:9c:35:a7:
8a:48:f4:a2:de:99:9b:e3:47:2a:24:2d:de:2b:2b:f8:ad:fd:
90:39:c9:1a:75:87:2f:21:03:fe:c3:dd:b5:f4:dd:bf:14:48:
1d:05:47:42:fb:d9:94:f3:7d:a5:94:b2:6a:1a:cf:f6:bf:b2:
25:5c:82:08:d4:8b:b1:fa:ff:a1:41:21:14:83:ab:1b:3d:d2:
75:9c:eb:8d:01:a4:f7:4a:97:83:cd:95:04:af:66:e1:46:02:
d1:94:6e:0f:88:09:c4:0b:f1:ac:ee:77:f3:62:c3:81:2f:80:
e1:ee:f2:8f:b3:99:db:b0:23:99:d2:d4:8a:f4:a8:90:c0:aa:
83:31:32:48:4b:c7:a1:c7:10:2b:e9:99:37:96:0d:d1:1f:28:
93:db:e7:ea:cd:43:05:42:a6:fb:3b:1b:b2:50:be:22:ea:36:
52:d4:26:43:a0:f3:09:e1:d6:04:50:e6:b2:70:e6:65:1c:35:
14:c9:60:0a:b3:92:aa:31:b7:5e:68:e0:7e:a7:75:9f:e0:a3:
82:5b:76:c0:d7:6d:0d:28:e0:c9:4b:f1:96:b2:ac:83:05:14:
af:82:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:10:34 2025 by rpki-client